# GitHub Actions Hardening, Airbnb Config Rollouts, Cloudflare Rust Restarts, ECS Managed Daemons, and Terraform Access Controls

Page: https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/github-actions-hardening-airbnb-config-rollouts-cloudflare-rust-restarts-ecs-managed-daemons-and-terraform-access-controls
Text version: https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/github-actions-hardening-airbnb-config-rollouts-cloudflare-rust-restarts-ecs-managed-daemons-and-terraform-access-controls.md
Podcast: [Ship It Weekly - DevOps, SRE, Platform and Cloud Engineering News](https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275)
Published: 2026-04-03T03:57:23+00:00
Episode link: https://rss.com/podcasts/ship-it-weekly/2685602
Audio file: https://content.rss.com/episodes/356364/2685602/ship-it-weekly/2026_04_03_03_53_35_3c56492a-5ad4-4b24-baf4-9c1249f27fe3.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/episodes/github-actions-hardening-airbnb-config-rollouts-cloudflare-rust-restarts-ecs-managed-daemons-and-terraform-access-controls
Duration seconds: 834

## Resource

This episode of Ship It Weekly is about the quiet platform work that keeps things safe before they break. Brian covers GitHub Actions hardening in Kubernetes-related repos, Airbnb’s safer config rollouts, Cloudflare’s zero-downtime Rust restarts, Amazon ECS Managed Daemons, and HCP Terraform access controls with IP allow lists and temporary AWS permission delegation. Links GitHub Actions security roadmap https://github.blog/news-insights/product-news/whats-coming-to-our-github-actions-2026-security-roadmap/ Airbnb config rollouts https://medium.com/airbnb-engineering/safeguarding-dynamic-configuration-changes-at-scale-5aca5222ed68 Cloudflare graceful restarts for Rust https://blog.cloudflare.com/ecdysis-rust-graceful-restarts/ Amazon ECS Managed Daemons https://aws.amazon.com/about-aws/whats-new/2026/04/amazon-ecs-managed-daemons/ HCP Terraform IP allow lists https://www.hashicorp.com/blog/hcp-terraform-adds-ip-allow-list-for-terraform-resources HCP Terraform AWS permission delegation https://www.hashicorp.com/blog/aws-permission-delegation-now-generally-available-in-hcp-terraform GitHub secret scanning updates https://github.blog/changelog/2026-03-10-secret-scanning-pattern-updates-march-2026/ GitHub secret scanning for AI coding agents https://github.blog/changelog/2026-03-31-secret-scanning-extends-to-ai-coding-agents-via-the-github-mcp-server/ Codespaces GA with data residency https://github.blog/changelog/2026-04-01-codespaces-is-now-generally-available-for-github-enterprise-with-data-residency Kubernetes v1.36 sneak peek https://kubernetes.io/blog/2026/03/30/kubernetes-v1-36-sneak-peek/ GKE Inference Gateway https://cloud.google.com/kubernetes-engine/docs/concepts/about-gke-inference-gateway More episodes and show notes https://shipitweekly.fm On Call Briefs http…

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/episodes/github-actions-hardening-airbnb-config-rollouts-cloudflare-rust-restarts-ecs-managed-daemons-and-terraform-access-controls/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/github-actions-hardening-airbnb-config-rollouts-cloudflare-rust-restarts-ecs-managed-daemons-and-terraform-access-controls.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.