1981 Sep
IPv4 is specified in RFC 791
IPv4 established the datagram addressing and routing model that cloud networks use for private workload addressing.
Infrastructure and operations
How the field of a Cloud Engineer got here: the sourced milestones from every published course of this career, on one axis.
1981 to 2026
417 milestones across 45 courses
The axis stretches toward recent years, where most milestones fall. Bars count milestones per year; dots are single milestones.
1 milestone
1981 Sep
IPv4 established the datagram addressing and routing model that cloud networks use for private workload addressing.
4 milestones
1993
CFEngine began as software for automated maintenance of networked computers. It established convergence-oriented configuration management before cloud provisioning became common.
1993 Sep
CIDR replaced class-based allocation with prefix-based addressing and route aggregation, making longest-prefix routing a central skill.
1996 Feb
RFC 1918 formalized reusable private ranges, making later address overlap a cloud-connection constraint.
1999
Salesforce introduced a browser-delivered business application, an early widely recognized SaaS model. It made the application service boundary, rather than customer-operated servers, the product a customer consumed.
28 milestones
2000
FreeBSD 4.0 added the jail system call and administration command for constrained process execution environments. Jails made host-shared operating-system isolation a practical system feature.
2005
Puppet was founded to address manual configuration management. Its open-source approach helped make policy expressed as code a mainstream systems practice.
2005 Jan
Solaris 10 reached general availability in January 2005. Its Zones facility established another operating-system virtualization model with a shared kernel.
2006
Amazon EC2 made compute capacity available on demand. Infrastructure design began to treat compute as an elastic service with explicit capacity and cost behavior.
2006 Mar
Amazon S3 made durable object storage available as an Internet service. Storage could become a separately selected architectural component rather than a resource provisioned with a server.
2006 Mar 14
AWS introduced S3 as an API-based object-storage service. It established buckets and objects as a storage interface distinct from attached disks.
2006 Aug
Amazon EC2 introduced resizable compute capacity available through a web-service interface. It linked rapid provisioning and capacity changes to metered compute use.
2006 Aug
The CIDR update documented aggregation and longest-match forwarding used when cloud route tables select a next hop.
2006 Aug 24
Amazon introduced resizable compute capacity as a web service. It made obtaining and configuring compute capacity a cloud service concern rather than a data-center procurement task.
2006 Aug 24
Self-service compute became available to anyone with a credit card, minutes after signup. The operating split between a provider that runs the hardware and a customer that runs everything above it arrived before any shared framework described who owned which control.
2008
Google introduced App Engine as a managed application runtime. This established a platform-as-a-service option that shifts more runtime responsibility to the provider.
2008
LXC's first release used a minimal init system for application containers. It exposed Linux kernel containment features through userspace tooling.
2008 Jan
Linux 2.6.24 introduced the initial cgroups implementation. Resource controls became a kernel primitive that container runtimes could apply to process groups.
2008 Apr
Google announced App Engine as a managed application platform. It established an early external compute model focused on applications rather than virtual-machine administration.
2008 Apr
Google made a managed application platform available to early developers. Migration choices could now include moving an application to a managed runtime rather than only moving virtual machines.
2008 Aug 20
EBS added persistent block volumes that could outlive an EC2 instance and introduced snapshots stored through S3. Storage design could separate instance lifetime from disk lifetime.
2008 Oct
Microsoft announced a platform combining hosted storage, compute, and networking services. The design scope explicitly included cloud, on-premises, and combined deployments.
2008 Oct
Microsoft announced the Windows Azure Community Technology Preview and its first SDK at PDC 2008. Azure began as a platform for cloud services rather than the full infrastructure portfolio familiar today.
2009
Amazon introduced VPC to connect existing networks to isolated cloud resources through a VPN. Network and administrative boundaries became first-class cloud architecture decisions.
2009
CFEngine announced version 3 with a free and open-source Community Edition. The release continued the promise-based configuration-management model.
2009
The CSA incorporated and released Security Guidance for Critical Areas of Focus in Cloud Computing, the first broad attempt to name the customer-side controls that a provider contract does not cover.
2009 May
Amazon CloudWatch entered public beta for monitoring AWS cloud resources. AWS operations gained a managed source of resource metrics for alarms and scaling decisions.
2009 May 17
AWS introduced Auto Scaling, Elastic Load Balancing, and CloudWatch for EC2. Compute fleets could then combine capacity changes, traffic distribution, and operational signals.
2009 Aug
Amazon VPC added isolated AWS compute resources connected to existing infrastructure through a virtual private network. Network placement and isolation became explicit design concerns.
2009 Aug
Amazon VPC brought isolated address spaces, subnets, VPN connectivity, and API-managed network objects into a public cloud service.
2009 Aug 26
Amazon VPC introduced isolated AWS compute resources connected to existing infrastructure through VPN. It established the virtual-network boundary that later AWS networking services build on.
2009 Oct
Amazon introduced RDS as a service for setting up, operating, and scaling a relational database in the cloud. It put patching, backups, and resizable capacity into the managed-service operating model.
2009 Oct 27
AWS introduced Amazon RDS with a managed MySQL service. Managed setup, patching, backups, and resizable capacity moved common relational database administration into the service boundary.
233 milestones
2010
Microsoft describes the Windows Azure authentication service as starting in 2010. The service established the cloud directory lineage behind later Azure AD and Microsoft Entra ID tenant concepts.
2010
The first control framework written specifically for cloud services, mapping each control to the party responsible for it and to existing standards. It made the shared-responsibility split auditable rather than rhetorical.
2010
The paper described a production tracing infrastructure for large, distributed systems, including ubiquitous instrumentation and sampling. It gave practitioners a concrete model for following work across services rather than inspecting hosts in isolation.
2010 Feb
Microsoft made Windows Azure commercially available. The launch expanded the set of major public-cloud platforms used for hosted applications and infrastructure services.
2010 Feb
Windows Azure and SQL Azure became generally available in 21 countries with production support and service-level agreements. This established the platform as a production cloud service.
2010 Feb 1
Microsoft announced production availability of Windows Azure and SQL Azure in 21 countries. Public cloud became a production destination for application and database workloads across another major platform.
2010 Feb 8
S3 added version IDs and optional bucket versioning. Overwrite and deletion recovery became an explicit object-protection design choice.
2010 Apr
Google describes its internal distributed tracing infrastructure, establishing the conceptual foundation for trace-based observability in large-scale systems.
2010 May
Google introduced a RESTful storage service in preview. Storage became a distinct cloud building block that applications could reach through an API.
2010 Jul
The OpenStack project released code for an open-source cloud-computing platform intended for public and private clouds. It gave organizations a common open-source route for operating cloud infrastructure.
2010 Jul 19
Rackspace and NASA introduced OpenStack as an open-source cloud platform for public and private clouds. It made a private-cloud operating model a visible part of the hybrid architecture conversation.
2010 Dec 6
Route 53 added managed DNS for routing names to AWS and external infrastructure. DNS became a first-class part of the AWS traffic path.
2011 Feb
AWS introduced CloudFormation for describing a collection of AWS resources in templates. The service provisioned resources in dependency order from that definition.
2011 Mar
The release added route-table and gateway patterns that made public, private, and VPN-connected subnet design a standard cloud task.
2011 May
Every AWS account gains an integrated service for creating users, groups, and JSON-based identity-based and resource-based policies, replacing the previous model where every API call used root credentials.
2011 May
IAM made users, groups, and permissions available through the AWS Management Console. Access control became a core platform capability rather than an application-specific concern.
2011 Aug 3
AWS introduced a dedicated connection from customer locations to AWS. Network connectivity became an explicit productized boundary between enterprise sites and public cloud resources.
2011 Aug 3
Direct Connect introduced dedicated connections from premises to AWS. Hybrid designs gained an alternative to carrying all traffic over the public internet.
2011 Sep
NIST formalized cloud computing through essential characteristics, service models, and deployment models. The framework made responsibility boundaries and deployment choices easier to describe consistently.
2011 Nov
Users and services in one AWS account can assume a role in another account through sts:AssumeRole, enabling delegated administration and the multi-account patterns that underpin modern landing zones.
2011 Dec
Government guidance set out the governance, compliance, trust, architecture, identity, data-protection, and incident-response questions an organization has to answer before moving data or workloads to a public cloud.
2012
Compute Engine established Google Cloud's virtual-machine execution model. Workloads could be defined around machine types, images, disks, networks, and zones.
2012
Prometheus began as an open-source monitoring project at SoundCloud. Its time-series model based on timestamps and labels became a practical reference point for metrics collection and cardinality.
2012 Jan
AWS announced DynamoDB as a fully managed NoSQL database service. The launch made service-managed partitioning and request capacity a mainstream cloud database design choice.
2012 Jan 18
DynamoDB introduced a managed key-value NoSQL service with predictable performance and scaling. Database selection on AWS now included a service designed around key-based access patterns rather than relational queries.
2012 May
Google made BigQuery publicly available after a limited preview. Analytics became a managed service family alongside application hosting and storage.
2012 Jun
Google introduced Compute Engine for general-purpose virtual machines. The platform added an infrastructure-as-a-service path beside managed application hosting.
2012 Jun
EC2 instances could receive an IAM role for access to AWS service APIs. Workloads could use role-based credentials instead of distributing long-term credentials in instance configuration.
2012 Jun 28
Google announced general-purpose virtual machines alongside its managed application platform. A migration could preserve a VM-oriented operating model when a managed runtime was not suitable.
2012 Aug 20
AWS introduced Glacier for low-cost archival and backup data where several-hour retrieval could be acceptable. Retrieval latency became a direct storage-tier decision.
2012 Aug 21
AWS made it possible to organize and track charges with resource tags used as business dimensions. Tag-based attribution became a practical cloud-billing pattern.
2012 Sep
The Security, Trust, Assurance and Risk registry let providers publish their control self-assessments in a common format, so customers could compare provider claims instead of taking each vendor's word separately.
2013
Docker made a packaged container workflow broadly available to developers. It helped establish the application artifact model later used by container orchestrators.
2013
Packer started as a project for building deployment images from one source configuration. It made cross-platform image creation a distinct automated build step.
2013 Feb
Amazon Redshift brought a managed cloud data warehouse to AWS. Analytical processing became a distinct service choice from the operational database path.
2013 Mar
Docker was first publicly demonstrated at PyCon in March 2013. The image-based build, share, and run workflow made application containers accessible to a broader developer audience.
2013 Mar
Docker made a portable container-image workflow broadly available. Container images became another artifact that teams could build and replace rather than modify in place.
2013 Mar 15
Docker was first publicly demonstrated at PyCon in March 2013. Its image-based build, share, and run workflow broadened the everyday use of application containers.
2013 Apr
Azure made Virtual Network generally available as an isolated private network with site-to-site connectivity. The service established the VNet as the foundation for Azure workload placement and hybrid paths.
2013 Apr
General availability of Infrastructure Services and Virtual Network added virtual machines and private network capabilities. Azure could then support more direct extensions of existing datacenter environments.
2013 Apr
The same release added point-to-site VPN connectivity for individual computers. Azure networking could then support both network-to-network and individual-client access patterns.
2013 Apr
Microsoft made Windows Azure Active Directory generally available for businesses and cloud application developers. Production cloud identity became a first-class application and directory service concern.
2013 Jun
HashiCorp released Packer 0.1, establishing a single workflow for building deployment images.
2013 Nov 13
Account-level recording of API calls became a standard cloud capability. Every administrative change now left an entry naming the identity, the action, the source address, and the result, which is the evidence an investigation depends on.
2014
AWS Lambda introduced event-triggered code execution without managing servers for the function runtime. It expanded the compute choices that begin with a workload's operational responsibilities.
2014
Resource Manager introduced resource groups and the deployment model that manages a solution as a group. It made scoped access, tags, dependencies, and repeatable deployments central to Azure management.
2014
Compose v1 was first released in 2014 as the Python-based docker-compose command. It added a file-based way to define a multi-container application.
2014 Jan
Torkel Ödegaard open-sources Grafana as a dashboard for Graphite time-series data, beginning what becomes the standard visualization layer for cloud-native metrics.
2014 Mar
VPC Peering made direct private connectivity possible and made non-overlapping prefixes and non-transitive topology explicit constraints.
2014 Apr
HashiCorp shipped the first Consul with service discovery, health checking, a KV store, and gossip-based membership, building on the Raft implementation proven in its earlier projects.
2014 Apr
Microsoft renamed Windows Azure to Microsoft Azure. The name change reflected a broader public-cloud platform that supported multiple operating systems, languages, and services.
2014 Apr 8
AWS introduced interactive historical-spend analysis in its billing console. Cost analysis became a provider console workflow rather than a manually assembled report.
2014 Jun
Microsoft documented ExpressRoute as private provider connectivity to Azure, alongside point-to-site and site-to-site VPN options. Hybrid design gained an explicit transport choice between internet VPN and private circuits.
2014 Jun
Google publicly introduced Kubernetes, bringing a shared orchestration model into the emerging cloud native ecosystem.
2014 Jun
Google announced Kubernetes as an open-source container manager. It brought a declarative, clustered control model to containerized workloads.
2014 Jun
Google engineers created Kubernetes. A portable control plane for containerized workloads became a practical architectural option for distributed application deployment.
2014 Jun
Kubernetes was publicly announced after its first commit in June 2014. Cluster operation became a distinct concern as the project moved beyond container scheduling experiments.
2014 Jun 6
Google engineers push the project's first commit, distilling lessons from a decade of running Borg internally into an open source container orchestrator.
2014 Jun 9
Docker Engine 1.0.0 was released with production support. The release established a stable baseline for the Engine workflow that uses images, containers, and the daemon API.
2014 Jun 9
Docker Engine 1.0 marked production support for a widely used container workflow. It helped establish a repeatable image-to-container unit for application delivery.
2014 Jun 10
Google announced Kubernetes at DockerCon as an open source container orchestration project. Container packaging now had a public control-plane model for managing a cluster.
2014 Jul
CloudWatch Logs added collection and near-real-time analysis of system, application, and custom log files. Investigations could use event detail alongside resource metrics.
2014 Jul
HashiCorp published the first Terraform release tag. Terraform made providers, resources, and a separate state record central to a cross-platform IaC workflow.
2014 Jul
Terraform introduced a tool for describing and creating infrastructure across providers. It linked versioned definitions to repeatable resource creation.
2014 Nov
Aurora added an AWS-built relational service compatible with MySQL. It made relational-engine compatibility and cloud-specific cluster architecture separate selection factors.
2014 Nov
AWS introduced Lambda as event-triggered compute where the provider manages the compute resources. It extended the managed-service boundary from provisioned servers toward functions that run in response to events.
2014 Nov
The Compute Engine Autoscaler became available in beta. Managed fleets could begin adjusting VM capacity from a defined autoscaling policy.
2014 Nov 13
Lambda introduced event-triggered function execution with AWS-managed compute resources. It made function invocations a separate choice from long-running servers.
2014 Dec 17
Amazon ECS introduced managed scheduling for Docker containers on EC2 clusters. It separated container orchestration from the applications running in the containers.
2015
Google launched Google Container Engine, later Google Kubernetes Engine, as its managed Kubernetes service. Kubernetes became a distinct execution-model choice beside VMs.
2015
Google co-founded the Cloud Native Computing Foundation as a vendor-neutral home for Kubernetes. Managed containers became part of a wider open cloud-native ecosystem.
2015 Jan
After production use at SoundCloud and early external adoption, the project was announced to the wider public. This expanded the open metrics ecosystem around the label-based data model.
2015 Feb
Key rotation for the gossip layer, TTL-based health checks that let applications report their own state, and service-specific addresses made multi-tenant and dynamic registrations practical.
2015 Mar
Azure App Service entered general availability as a managed platform for web and mobile application development. It established the managed web-hosting branch of Azure compute.
2015 Apr 9
EFS added elastic NFS file storage that multiple EC2 instances could access concurrently. AWS storage selection gained a managed shared-file option.
2015 Jun
Azure AD Connect became generally available as the single tool for connecting on-premises directories to Azure AD. Hybrid identity operations gained a standard synchronization path.
2015 Jun
The Open Container Initiative formed to develop vendor-neutral standards for container formats and runtimes. This created a shared interoperability target for tools in the image-to-runtime path.
2015 Jun 10
VPC Flow Logs added managed capture at VPC, subnet, and elastic network interface scope. Troubleshooting could use AWS-recorded flow metadata instead of only host-installed agents.
2015 Jun 22
AWS extended tag-based cost breakdowns to Glacier vaults. Allocation coverage increasingly depended on which services exposed usable metadata.
2015 Jun 22
Docker and other participants formed the Open Container Project to define common container format and runtime specifications. The project later became the Open Container Initiative.
2015 Jun 29
AWS added cost budgets, forecasts, and notifications for actual or forecasted budget thresholds. Practitioners could compare expected cost with a defined limit in the same service.
2015 Jul
AWS made Aurora available for customers after its 2014 announcement. It tied a MySQL-compatible relational interface to a provider-designed replicated storage architecture.
2015 Jul
The CNCF was announced to advance common technologies for container-packaged, dynamically scheduled, microservices-oriented applications. Architecture practice gained a neutral home for shared cloud native infrastructure.
2015 Jul
Kubernetes 1.0 reached release and was donated to the newly formed CNCF. The project acquired a production-facing governance and release home.
2015 Jul
Kubernetes reached 1.0 and was donated to the newly formed CNCF. The project gained a vendor-neutral foundation for shared cloud native infrastructure.
2015 Jul
Kubernetes 1.0 made the project available for production use and established the platform context in which Pod networking, Services, and plugins became operational concerns.
2015 Jul
The 1.0 release marked an early production milestone for Kubernetes and made platform controls a practical concern for more teams.
2015 Jul
Kubernetes reached its v1.0 release, establishing the platform that later networking APIs and implementations build upon.
2015 Jul 10
Kubernetes 1.0 established an initial stable release for its cluster API and workload orchestration model. It made declarative workload management available beyond the project's early releases.
2015 Jul 21
The Linux Foundation announced CNCF to advance cloud native application and service development. Kubernetes entered the foundation as seed technology for the ecosystem.
2015 Jul 21
Google declares Kubernetes production-ready at 1.0 and hands the project to the newly formed Cloud Native Computing Foundation, separating it from any single vendor's control.
2015 Oct
AWS introduced a managed migration service for moving databases to AWS with ongoing replication. Migration planning gained a service-assisted path alongside schema conversion and application validation.
2015 Nov
Microsoft introduced Virtual Machine Scale Sets for deploying and managing collections of VMs as a set. The service made scale-out fleet management a distinct Azure compute pattern.
2015 Dec
Consul replaced its LMDB dependency with a pure-Go radix tree, improving read throughput and garbage collection, and added network tomography for round-trip-time estimates between nodes.
2016
Prometheus joined the Cloud Native Computing Foundation as its second hosted project. Metrics collection and alerting became a prominent shared component of cloud-native operations.
2016 Feb 4
Docker 1.10 added support for defining networks and volumes in Compose files. Multi-container definitions could describe more of the resources an application needs.
2016 Feb 29
A consensus configuration baseline for a cloud provider, covering logging, identity, and network settings. It became the default first yardstick for whether an account was set up safely, and the check set most posture tools shipped with.
2016 Mar
Kubernetes became the CNCF’s first hosted project. Its control-plane model moved from a single-provider origin into a vendor-neutral cloud native ecosystem.
2016 Mar 10
The foundation's Technical Oversight Committee takes on Kubernetes as CNCF's inaugural project, giving the desired-state model this course teaches a neutral governance home.
2016 Mar 10
Kubernetes was accepted as the first CNCF incubating project. The project became a shared foundation-led reference point for cloud native orchestration.
2016 Mar 15
AWS made its database migration service available to all customers. Replication and schema conversion became dedicated capabilities in migration planning rather than entirely custom work.
2016 Apr
Virtual Machine Scale Sets reached general availability. The service paired common VM configuration with autoscaling and load-balancer integration.
2016 May
Prometheus joined CNCF as an early monitoring project. Metrics became a prominent common component of cloud native operational practice.
2016 Jun 20
Docker 1.12 added services and nodes for swarm mode to Docker Engine. The release distinguished multi-host orchestration concerns from running an individual container.
2016 Jul
Kubernetes 1.3 added a NetworkPolicy API, making selected Pod communication a declarative concern while leaving enforcement to compatible networking implementations.
2016 Sep
Atomic multi-key transactions, native ACL replication, and server connection rebalancing arrived together; the same release cycle saw large operators such as Datadog publish their production Consul practices.
2016 Sep
Google announced a portfolio spanning Google Cloud Platform, machine learning tools, APIs, and other services. The platform became easier to view as related service families instead of isolated products.
2016 Sep
Kubernetes 1.4 introduced kubeadm for bootstrapping a control plane and joining nodes. It made self-managed cluster lifecycle steps more repeatable.
2016 Sep
Azure AD Privileged Identity Management and Identity Protection became generally available. Privileged access could be designed around activation and risk-aware protection rather than permanent administrator assignments alone.
2016 Oct
Cloud Storage added Coldline and the ability to set storage class per object. Lifecycle policy could then move matching objects between classes.
2016 Oct
StorageClass introduced a named provisioner and parameters for on-demand PersistentVolume creation. Administrators could expose multiple storage tiers without pre-creating every volume.
2016 Oct
CNCF accepts OpenTracing as its third hosted project, establishing a vendor-neutral API standard for distributed tracing.
2016 Oct 21
AWS announced a Budget API and notification delivery through email or Amazon SNS. Budget thresholds could begin a manual, semi-automated, or automated response process.
2016 Nov
Azure Functions reached general availability after its March 2016 preview. Azure added a first-class event-driven execution model with triggers and bindings.
2016 Nov
AWS published a machine-readable resource specification for CloudFormation. Tooling could use a defined schema to understand template resource properties.
2016 Nov 30
Lightsail added bundled virtual-server resources and preconfigured templates. It created a smaller-interface path for common web workloads.
2016 Dec
Native VPC IPv6 support introduced dual-stack operation with separate IPv6 routing, filtering, DNS, and egress concerns.
2016 Dec 1
AWS Batch introduced managed job queues, scheduling, and compute environments. It made finite batch work a first-class execution model instead of a self-managed EC2 pattern.
2017 Jan 19
Docker 1.13 added Compose-file support to docker stack deploy. A Compose-style application definition could describe services for swarm mode.
2017 Feb
AWS Organizations introduced policy-based management across multiple accounts and organizational units. Account structure became a platform-level governance design.
2017 Feb
Azure announced Network Watcher with topology, next-hop, IP flow verification, packet capture, and flow-log capabilities. Network troubleshooting gained platform-native evidence for routes and policy.
2017 Feb
Managed Disks removed storage-account scale management for VM disks, while Scale Sets gained larger deployment capacity. VM fleet designs could use managed disks with less storage coordination.
2017 Feb
SCPs set organization-level permission guardrails for IAM users and roles in member accounts. They do not grant permissions; they cap the maximum available permissions.
2017 Mar
Google announced Cloud Functions as an event-driven serverless capability. It added a managed way to connect services with code without provisioning a server.
2017 Mar
The StorageClass-based provisioning model graduated to stable. PVC authors could select a class while platform operators kept the provider details behind it.
2017 Mar
SIG Cluster Lifecycle described shipping kubeadm with the Kubernetes 1.6 distribution. Cluster bootstrap and lifecycle tooling became part of the project’s regular release surface.
2017 Apr
AWS X-Ray became generally available for tracing requests through distributed applications. Request paths and service maps became available alongside CloudWatch telemetry.
2017 Apr
Packer 1.0 formalized a stable image-building workflow for cloud platforms, virtual machines, and containers. The release marked image construction as a mature deployment concern.
2017 Apr
Packer 1.0 marked a stability and backwards-compatibility milestone for the image-building workflow.
2017 Apr
The RBAC authorizer moved to beta and began to be enabled by default by common provisioning tools. It offered a migration path away from ABAC, whose policies were files on the API server that required a restart to change.
2017 May
Microsoft announced general availability of Azure Cosmos DB. The service combined geographic distribution with configurable consistency and multiple data models.
2017 May
Cilium's early Kubernetes release presented eBPF as a way to implement container networking, policy, and visibility in the Linux data path.
2017 May
Google made Cloud Spanner generally available as a globally distributed relational database service. It brought SQL semantics and ACID transactions into a horizontally scalable managed service.
2017 May
IAM policies for buckets became generally available. Bucket access could be managed through Google Cloud IAM alongside existing access mechanisms.
2017 May
Istio's first public release brought managed traffic, security, and monitoring concerns into a service-to-service networking layer above basic connectivity.
2017 Jun
Kubernetes 1.7 promoted NetworkPolicy to stable, making label-based Pod communication rules a stable API while leaving enforcement to network plugins.
2017 Jun 29
CRDs replace the earlier ThirdPartyResource mechanism, letting teams extend the kube-apiserver with their own object kinds instead of working only with what ships in core.
2017 Jul
Google Cloud VPC made one virtual network span regions while keeping subnets regional, broadening provider scope choices.
2017 Jul 19
OCI released version 1.0 of its image-format and runtime specifications. Tools could now target common definitions for image content and container lifecycle behavior.
2017 Aug 2
Terraform v0.10 changed provider distribution so providers could be released separately from the Terraform CLI. Provider selection became a distinct dependency concern for configuration authors.
2017 Aug 14
AWS introduced a central view for tracking migrations across AWS and partner tools. Portfolio-level progress and issue visibility became a separate migration-management concern.
2017 Aug 17
The redesigned Cost Explorer added more flexible filtering, saved reports, and forward forecasting over user-defined intervals. Cost views could better match a chosen reporting scope.
2017 Sep
Azure App Service added generally available Linux hosting and custom container support. Managed web hosting could now cover more runtime and packaging choices.
2017 Sep
Microsoft introduced Azure AD Managed Service Identity preview for Azure workloads. It gave code an automatically managed identity so workloads could avoid placing credentials in source code.
2017 Sep
NIST published the Application Container Security Guide, documenting container risks across images, registries, orchestrators, containers, and hosts.
2017 Sep 25
Microsoft introduced discovery, assessment, dependency mapping, rightsizing, and compatibility reporting for Azure migrations. Discovery evidence became more directly connected to target planning.
2017 Sep 25
Microsoft announced that initial Azure Stack integrated systems had shipped through hardware partners. Provider-branded services and operations moved into customer data centers.
2017 Oct
The 1.0 release marked production maturity of the core platform, with performance and scale work across Raft and the catalog.
2017 Oct
Kubernetes 1.8 added egress policy capabilities, allowing workloads to restrict connections they initiate as well as inbound connections.
2017 Oct
RBAC graduated to stable, fixing Roles, ClusterRoles, and their bindings as the authorization vocabulary. Cluster access design moved from provisioning-time configuration to ordinary API objects that could be reviewed and version-controlled.
2017 Oct 17
Docker Enterprise Edition folds unmodified upstream Kubernetes in alongside Swarm, conceding that the object model this course introduces had become the default rather than one option among several.
2017 Nov
Google announced general availability of Cloud Spanner multi-region configurations. The release extended synchronous replication and transactions across regions and continents.
2017 Nov
Requester Pays let a bucket require callers to specify a billing project for request charges. Data sharing could separate data ownership from request billing.
2017 Nov 1
Direct Connect Gateway allowed a Direct Connect location to reach VPCs in multiple AWS Regions. Hybrid connectivity moved beyond one associated Region.
2017 Nov 8
PrivateLink introduced interface endpoints for private access to supported AWS services from a VPC. Service access no longer required an internet gateway or NAT gateway path.
2017 Nov 29
Fargate introduced container capacity without a customer-managed EC2 cluster. Container users could specify task resources, networking, and IAM while AWS managed the underlying infrastructure.
2017 Nov 29
AWS announces a managed control plane for Kubernetes at re:Invent, the first sign that the major clouds would sell Kubernetes's control plane as a service rather than leave operators to run etcd and kube-apiserver themselves.
2017 Nov 29
AWS announced SageMaker at re:Invent with hosted notebooks, the first ten built-in algorithms, one-click training, and autoscaling deployment, packaged as a fully managed path from data to predictions.
2017 Dec
Azure Policy entered public preview as a control and governance service for Azure resources. It established a separate policy mechanism alongside identity-based authorization.
2018 Jan
Network Watcher Connection Troubleshoot became generally available. It supplied point-in-time path, configuration, latency, and probe evidence between an Azure source and a destination.
2018 Jan
Kubernetes 1.9 added alpha CSI support for out-of-tree storage plugins. Storage vendors could integrate through Kubernetes primitives without adding plugins to the core tree.
2018 Jan
Google releases OpenCensus, a vendor-neutral library for metrics collection and distributed tracing derived from its internal Census library.
2018 Feb
Azure Storage virtual network service endpoints and network rules reached general availability. Azure services could apply network-based access boundaries using selected VNets and subnets.
2018 Mar
Availability Zones became generally available in selected regions. They gave supported services a regional design option for independent power, network, and cooling failure domains.
2018 Mar
Cloud Storage added dual-regional storage as one bucket spanning a selected pair of regions. Practitioners could use a single object namespace without managing a second bucket for replication.
2018 Mar
Kubernetes 1.10 made the default StorageClass annotation beta. Operators increasingly had to treat storage behavior and defaulting as cluster-wide lifecycle concerns.
2018 Mar
CNCF graduated Kubernetes after its maturity review. Practitioners increasingly treated Kubernetes as a stable shared control-plane foundation.
2018 Mar
Kubernetes became the first project to graduate from CNCF. Container orchestration had become an established option for managing distributed workload placement and lifecycle.
2018 Mar 6
CNCF certifies Kubernetes as having thriving adoption and a documented governance process — the first project to clear the foundation's graduation bar.
2018 Mar 6
CNCF graduated Kubernetes after assessing adoption, governance, and community criteria. Graduation gave practitioners a maturity signal beyond feature availability.
2018 Apr
Azure Container Instances became generally available for Linux and Windows containers. Azure added a container-group option that did not require VM provisioning or a full orchestrator.
2018 Apr
Local persistent volumes brought node-local capacity into the PV model. WaitForFirstConsumer let the scheduler choose a compatible node before binding a claim.
2018 May
Neptune added a managed graph database to the AWS portfolio. Relationship traversal could be evaluated as a first-class data-model choice instead of being forced into tables or documents.
2018 May
Azure Policy became generally available and integrated with Azure Resource Manager. Organizations could define and enforce rules for resource configurations at scale.
2018 Jun
Azure Kubernetes Service reached general availability with managed control-plane operation. Kubernetes became a direct Azure compute choice for teams that needed its API and ecosystem.
2018 Jun
Consul 1.2 introduced Connect, adding automatic mutual TLS and identity-based authorization between services through sidecar proxies, with Envoy support following in the 1.3 line.
2018 Jun
Pulumi launched with an open-source, multi-language approach to cloud infrastructure. It broadened IaC choices beyond dedicated configuration languages and templates.
2018 Jun 5
Amazon EKS made a managed, Kubernetes-conformant control plane available for production workloads. Kubernetes compatibility became an AWS compute selection path alongside ECS.
2018 Jun 5
AWS's managed control plane leaves preview, joining Google's and soon Azure's equivalents and cementing "rent the control plane, run your own nodes" as the default way most teams meet Kubernetes.
2018 Jun 18
Pulumi launched as an open-source cloud development platform using general-purpose programming languages for cloud infrastructure.
2018 Jul
Management groups became generally available for organizing subscriptions and applying Policy and Azure RBAC across their hierarchy. Governance could then be assigned above an individual subscription.
2018 Jul
Istio 1.0 marked the project’s first major release and made service-mesh traffic management a more established implementation option for production Kubernetes platforms.
2018 Jul
A permissions boundary caps the maximum permissions that identity-based policies can grant to an IAM user or role, enabling delegated identity administration without unbounded privilege escalation.
2018 Jul 17
SageMaker added high-throughput batch transform jobs, giving teams a job-based alternative to persistent endpoints for predictions over whole datasets.
2018 Jul 18
Docker Engine 18.06 introduced an experimental builder backend based on BuildKit. The build path gained a newer implementation for producing container images.
2018 Aug
AWS introduced Aurora Serverless as a relational-database deployment option that starts, scales, and stops capacity for changing workloads. It made capacity behavior an explicit managed database choice.
2018 Aug
Prometheus becomes CNCF's second graduated project after Kubernetes, validating its maturity for production cloud-native monitoring.
2018 Sep
Azure Virtual WAN reached general availability for large-scale branch connectivity. Managed virtual hubs became an Azure option for branch, VPN, and routing designs.
2018 Sep 24
Microsoft described Azure Migrate, Azure Database Migration Service, and Azure Data Box as migration capabilities. Different workload components could use specialized discovery, data, and transport services.
2018 Oct
Microsoft made the Azure SQL Database Managed Instance general-purpose tier generally available. It added a managed migration path for SQL Server workloads that needed broader instance compatibility.
2018 Oct
Kubernetes introduced snapshot API objects for CSI-backed volumes. Storage workflows could begin to model point-in-time copies as Kubernetes resources.
2018 Nov
The new ACL system brought tokens with accessor IDs, a policy model, auth methods, and a redesigned UI for managing them, replacing the legacy mechanism deprecated here and removed in 1.11.
2018 Nov
Transit Gateway introduced a managed hub for VPCs and on-premises networks, shifting large deployments toward centralized route control.
2018 Nov
A flaw in how kube-apiserver handled proxied upgrade requests let an authorized client send arbitrary requests to a backend using the API server's own TLS credentials, scoring 9.8 on CVSS v3. It was the first critical Kubernetes CVE to prompt broad emergency patching.
2018 Nov
IAM added attribute-based access control as a complement to role-based access control. Tags could participate in permission decisions as identity and resource attributes.
2018 Nov 26
DataSync introduced automated online transfer between on-premises storage and S3 or EFS. Data movement became a distinct managed service rather than an implied storage feature.
2018 Nov 26
Transit Gateway introduced a central router for VPC and hybrid attachments. Multi-network routing could use hub-and-spoke route tables instead of expanding pairwise connections.
2018 Nov 28
FSx added a managed Windows-native file system. File-system implementation and protocol requirements became a first-class selection input.
2018 Nov 28
AWS announced Outposts for bringing AWS infrastructure and operating models to on-premises facilities. The offering centered hybrid design on using familiar cloud APIs at local sites.
2018 Nov 28
re:Invent 2018 brought Ground Truth for managed dataset labeling with Mechanical Turk and vendor workforces, and Neo for compiling trained models to run on cloud and edge hardware.
2018 Dec
CSI reached stable status after its alpha and beta stages. Storage drivers could evolve independently while remaining behind the PV, PVC, and StorageClass APIs.
2018 Dec 3
Kubernetes 1.13 makes kubeadm stable, giving operators a first-party, certified path to bootstrap the control plane and node components this course's architecture section describes, instead of assembling them by hand.
2019 Jan 8
DocumentDB added a managed document database with MongoDB compatibility. Compatibility testing became an explicit part of selecting a managed document target.
2019 Feb
Practitioners formed the FinOps Foundation to develop shared practices beyond vendor tooling. Allocation gained a cross-functional operating context.
2019 Feb 28
containerd graduated from CNCF as a container runtime that manages image transfer, storage, execution, supervision, and host attachments. Its adoption reinforced the separation between higher-level engines and runtime lifecycle services.
2019 Mar 14
Google Cloud Billing added alerts for costs forecasted to exceed a budget. Forecast thresholds became available alongside actual-cost thresholds.
2019 Apr
Google introduced Anthos for managing applications across environments. Hybrid and multicloud operation became part of the platform's application-management direction.
2019 Apr
Azure Front Door Service reached general availability as a global application entry point. Azure traffic distribution gained a global edge service distinct from regional load balancers and DNS routing.
2019 Apr
Cloud Run introduced a managed environment for stateless HTTP-driven containers. It separated container deployment from operating servers and clusters.
2019 Apr 9
Google introduced Anthos as a platform for running and managing applications across on-premises infrastructure and public clouds. The announcement emphasized portability and common management across locations.
2019 May
OpenTracing and OpenCensus merge to form OpenTelemetry, a CNCF project unifying distributed tracing, metrics, and logging under one framework.
2019 May
OpenCensus and OpenTracing announced their merger into OpenTelemetry. The project aimed to provide common APIs and tooling for distributed telemetry.
2019 May
The two projects merged to form OpenTelemetry. The merge aimed to give instrumentation a common vendor-neutral home instead of asking libraries to choose between competing tracing APIs.
2019 May 21
OpenTracing and OpenCensus merged into OpenTelemetry as a CNCF sandbox project. The merger aimed to converge tracing and telemetry instrumentation work on one initiative.
2019 May 22
Terraform v0.12 introduced a redesigned language with first-class expressions and richer values. Existing configurations could require upgrade work because the parser and language model became stricter.
2019 Jun 10
Crosswalk introduced higher-level AWS components intended to encode common infrastructure patterns and defaults.
2019 Jul
A server-side request forgery flaw let an attacker reach the instance metadata service, read the attached role credentials, and use them to copy data on more than one hundred million people from storage. The case became the standard example of how one application bug plus a broad workload identity becomes a data breach.
2019 Aug
Service-router, service-splitter, and service-resolver config entries enabled path-based routing, traffic shifting, and failover; mesh gateways let Connect traffic cross datacenters over SNI without direct server connectivity.
2019 Aug
Trail of Bits and Atredis Partners assessed eight core components against Kubernetes 1.13.4 and reported 37 findings, alongside a whitepaper and attacker-oriented threat guide. Findings and documentation were released publicly rather than summarized.
2019 Sep
Azure announced the Private Link preview for private access to Azure, partner, and customer services from a VNet. Private endpoints made private IP addressing and DNS design central to service access.
2019 Sep
Kubernetes 1.16 removed several deprecated API versions. Upgrade preparation became inseparable from finding and migrating old manifests before a control-plane change.
2019 Sep 5
The 1.0 release established a stable infrastructure-as-code workflow based on desired resources and planned CRUD operations.
2019 Oct
Jaeger becomes CNCF's seventh graduated project, establishing a production-grade distributed tracing backend alongside the emerging OpenTelemetry standard.
2019 Nov
Microsoft introduced Azure Arc to extend Azure management and services to infrastructure outside Azure. The platform's management model expanded to hybrid and multicloud environments.
2019 Nov
Cloud Run reached general availability as a fully managed serverless execution environment. The managed-container option became a production execution model alongside VMs and Kubernetes.
2019 Nov
ServiceLens connected CloudWatch metrics and logs with X-Ray traces in a common application view. The operating model shifted toward correlating multiple telemetry signals during investigation.
2019 Nov 4
Microsoft announced Azure Arc in preview for extending Azure services and management to other infrastructure. Hybrid control planes expanded beyond a single provider location.
2019 Nov 19
The metadata service moved to session-authenticated requests with a low IP time-to-live and a request-header requirement, so a forwarded or proxied request can no longer retrieve instance role credentials. It is the direct control response to the previous attack class.
2019 Dec
AWS introduced a managed service for creating, patching, testing, distributing, and sharing server images. Image maintenance could move from manual snapshots into an automated pipeline.
2019 Dec
Fargate added Amazon EKS support. The serverless-capacity choice could then serve both AWS-native and Kubernetes container orchestration.
2019 Dec
Uses automated reasoning to identify resources shared outside a defined zone of trust. Later extended with internal access analysis, unused access findings, policy validation, and policy generation.
2019 Dec
The snapshot API advanced to beta with a controller, validation webhook, and CSI integration. Cluster distributions had clearer components to install and operate for snapshot workflows.
2019 Dec 3
re:Invent 2019 launched SageMaker Processing for managed data preparation, Autopilot for automated model building, and SageMaker Studio, billed as the first fully integrated IDE for machine learning.
151 milestones
2020 Jan
Archive Storage added a long-term, rarely accessed storage class. Storage-class selection gained a separate option for annual-access data.
2020 Feb
Enterprise namespaces separated teams' services, KV data, sessions, and ACLs within one datacenter, removing name collisions between tenants.
2020 Feb
Packer 1.5 introduced HCL2 templates, bringing source and build blocks into the current template model.
2020 Feb
W3C standardized HTTP headers and value formats for propagating trace context between services. This made trace identity portable across components and tracing implementations.
2020 Mar
Istiod combined previously separate control-plane components into one binary, changing the operational shape of managing a mesh control plane.
2020 Mar
Azure announced a new Connection Monitor for end-to-end monitoring across Azure and hybrid deployments. Continuous path observation joined point-in-time diagnosis in the networking toolset.
2020 Apr
CloudWatch Synthetics made scheduled canaries generally available for APIs, URLs, and web content. Teams could verify availability and latency even without customer traffic.
2020 Apr 7
Docker announced an open Compose Specification community with cloud and platform providers. A multi-container application definition could evolve independently of one implementation.
2020 Apr 21
Pulumi 2.0 expanded language SDK coverage and added team-oriented capabilities including policy as code and testing support.
2020 May
The SPIFFE and SPIRE 1.0 release established a stable milestone for workload identity and identity issuance in dynamic environments.
2020 May
Instance protection, custom scale-in policy, and terminate notification became generally available. Scale-in could be coordinated more deliberately with application shutdown behavior.
2020 Jun
Envoy-based terminating gateways connected mesh services to external destinations such as managed databases, ingress gateways brought external traffic in, and WAN federation could traverse mesh gateways.
2020 Jun
The FinOps Foundation became part of the Linux Foundation. The community continued developing open guidance for cloud financial management.
2020 Jun
The FinOps Foundation became part of the Linux Foundation, moving the practice into a broader open-source foundation structure.
2020 Aug
Kubernetes 1.19 graduated Ingress to v1, stabilizing the core API for HTTP and HTTPS access to Services.
2020 Aug
The document defined zero trust for implementers: no access granted on network location alone, every request authenticated and authorized against the subject, device, resource, and context. It gave cloud teams a referenceable definition rather than a vendor slogan.
2020 Aug
Starting with Kubernetes 1.19, the project extended patch support from about nine months to one year. Operators gained a longer but still finite upgrade planning window.
2020 Aug 10
Terraform v0.13 added automatic installation for third-party providers and allowed count, for_each, and depends_on on modules. Provider source addresses and reusable module composition became more explicit.
2020 Sep
In Kubernetes 1.19, kube-proxy began reading EndpointSlices by default, replacing large single Endpoints objects with smaller backend sets.
2020 Sep
The asia1 Tokyo and Osaka dual-region became available. The location model expanded with a documented paired-region choice in Asia.
2020 Sep 30
Timestream added a purpose-built time-series database. Workloads organized around measurements and time could use a service with time-oriented storage and query behavior.
2020 Oct
AWS announced the AWS Distro for OpenTelemetry preview for collecting metrics and distributed traces. Instrumentation could send correlated telemetry to AWS monitoring services and other backends.
2020 Oct 19
Automation API exposed programs, stacks, and lifecycle operations through language SDKs for embedded infrastructure automation.
2020 Dec
Kubernetes announced the future removal of its built-in Docker Engine adapter. Cluster operators had to identify runtime dependencies and move toward CRI-compatible runtimes.
2020 Dec
Microsoft introduced Project Bicep as a domain-specific language for Azure resource deployment. It offered a more concise authoring layer over Azure Resource Manager templates.
2020 Dec
The CSI snapshot API reached stable status. Restoring a snapshot into a new PVC became a standard Kubernetes storage workflow.
2020 Dec 1
EBS gp3 allowed IOPS and throughput to be provisioned independently of volume capacity. Performance planning no longer had to use capacity as the primary performance control.
2020 Dec 2
Terraform v0.14 propagated sensitive input markings through expressions and generated a dependency lock file during init. Teams could preserve provider selections alongside configuration in version control.
2020 Dec 8
The kubelet's built-in Docker Engine support is marked for removal in favor of CRI-compliant runtimes, a reminder that the container runtime is a pluggable node component, not part of Kubernetes itself.
2020 Dec 8
re:Invent 2020 added Pipelines for workflow orchestration, Feature Store for online and offline features, the Model Registry with approval workflows, Clarify for bias detection and explainability, and JumpStart for pretrained models, assembling the MLOps lifecycle into one service.
2021
Microsoft described a backup authentication service that enforces Conditional Access during an Azure AD outage. Identity policy design had to account for real-time and resilience-evaluated conditions.
2021 Feb
The tracing specification and first language SDKs hit stable general availability, providing the first long-term stability guarantees for production adoption.
2021 Feb
Packer 1.7 split plugin development interfaces from the core into the Packer Plugin SDK.
2021 Apr
Kubernetes 1.21 made EndpointSlice stable, cementing it as the scalable representation of Service backends.
2021 Apr
SIG Network published conformance work to compare CNI behavior across NetworkPolicy constructs, highlighting implementation differences beneath one API.
2021 Apr
The project deprecated PSP and announced removal in 1.25, citing usability problems that could not be fixed without breaking changes — notably that it was difficult to determine which policy applied to a given Pod.
2021 May
Google announced Vertex AI as a unified managed machine learning platform. AI services became a more integrated product family in the broader cloud platform.
2021 May 5
OCI released the Distribution Specification version 1.0.0. Registry interactions gained a standard companion to the image and runtime specifications.
2021 May 12
Federal agencies were directed to adopt zero-trust architecture, multi-factor authentication, and encryption, and to move to secure cloud services on a fixed schedule. It pulled cloud security requirements from guidance into procurement.
2021 Jun
Transparent proxying redirected all workload traffic through Envoy with iptables, removing application-side proxy awareness; streaming health updates and xDS v3 cut CPU and bandwidth at scale, and the legacy ACL system was deprecated.
2021 Jun
HashiCorp announced HCP Packer to track image metadata between image creation and deployment workflows.
2021 Jun
SLSA introduced a framework for describing supply-chain integrity practices and verifiable build evidence.
2021 Jun
Terraform 1.0 marked a stable interface after years of production use. Infrastructure definitions and state management had become an established foundation for repeatable provisioning.
2021 Jun 8
Terraform v1.0 made stability the release's primary focus and defined compatibility promises for the language, CLI workflow, provider protocol, and installation protocols.
2021 Jul
The project moved from four releases per year to three starting with Kubernetes 1.22. The operational cadence shifted toward fewer, longer release cycles.
2021 Jul 13
Google described replication-based VM migration with test clones, migration groups, and cutover. Testable replication and grouped execution became part of the service workflow.
2021 Aug
The two agencies released a cybersecurity technical report describing common threats to Kubernetes environments and the configuration that reduces them. It gave organizations an external, citable baseline rather than vendor guidance.
2021 Aug
The CNCF TOC promotes OpenTelemetry from sandbox to incubating status, reflecting rapid community adoption and API maturity.
2021 Aug 19
MemoryDB added a durable in-memory database service. AWS users could distinguish a cache from an in-memory primary data store when designing low-latency applications.
2021 Aug 26
CNCF accepted OpenTelemetry at incubating maturity after the project developed governance and supported telemetry components. It strengthened a common path for metrics, logs, and traces.
2021 Sep
AWS made tracing support in the AWS Distro for OpenTelemetry generally available. OpenTelemetry became a supported path for production trace instrumentation on AWS.
2021 Sep
The OpenTelemetry project reported its Collector's first general availability release and a tracing stability milestone. Collection, processing, and export became a stable pipeline concern alongside application instrumentation.
2021 Sep
Turbo Replication added an SLA-backed 15-minute recovery point objective for dual-region buckets. Recovery requirements could now select a replication objective as part of the location design.
2021 Sep 16
Pulumi 3.0 added multi-language component packages, making reusable infrastructure components available across supported languages.
2021 Oct
Spot VMs introduced an interruptible provisioning model using excess capacity. Cost optimization became explicitly tied to fault-tolerant and restartable workload design.
2021 Oct 12
Google announced a portfolio extending infrastructure to data centers and edge locations. Hybrid placement increasingly included local processing and sovereignty requirements alongside cloud connectivity.
2021 Nov
Generates fine-grained IAM policies from CloudTrail access activity, automating the path from over-permissive starter policies to least-privilege production policies.
2021 Nov
The Technical Advisory Council approved the earlier cloud-financial-management definition later replaced by the 2024 wording.
2021 Nov
Gateway API beta advanced a role-oriented routing model that separates infrastructure ownership from application route ownership.
2021 Nov 30
AWS announced SageMaker Canvas, a visual no-code interface for business analysts to build and use models, later absorbing Autopilot's UI and Data Wrangler's data preparation.
2021 Dec
The replacement for PSP arrived as a built-in admission controller driven by namespace labels, applying the Pod Security Standards in enforce, audit, and warn modes.
2021 Dec 1
VPC IPAM added centralized planning, tracking, and monitoring for address space. Address allocation became an explicit multi-account and multi-Region operating concern.
2021 Dec 1
SageMaker Inference Recommender reached general availability, automating load tests across instance types so teams could replace trial-and-error endpoint sizing with measured recommendations.
2021 Dec 8
Google Cloud described allocation percentage as a FinOps metric spanning directly attributable, shared, and non-taggable costs. Coverage became an explicit operating measure.
2021 Dec 8
Terraform v1.1 introduced moved blocks so module authors could record resource address changes in configuration. Planning could then migrate matching state addresses without a separate manual state move.
2022
Vendor-neutral guidance for secure cloud adoption and migration, covering shared services, zero trust, and continuous posture management. It consolidated a decade of practice into one reference architecture agencies and their vendors could build against.
2022 Feb 17
AWS introduced budgets that calculate a new period amount from historical billing data. Teams could use a historical baseline while still deciding how to handle planned changes outside that baseline.
2022 Apr
Workloads could exchange AWS IAM identities for Consul tokens, removing static credential distribution, and per-listener TLS configuration became possible.
2022 Apr
Metrics Insights added SQL-based querying and aggregation across operational metrics. Practitioners could explore large metric sets without prebuilding each dashboard view.
2022 Apr
Kubernetes 1.24 removed the in-tree dockershim. Operators with Docker Engine dependencies had to assess runtime and tooling assumptions before upgrading.
2022 Apr 21
Serverless Inference reached general availability after a December 2021 preview, scaling compute to zero between requests for intermittent workloads and raising per-endpoint concurrency to 200.
2022 Apr 26
Docker Compose v2 became generally available and the docker compose form became the documented standard. Compose moved into the Docker CLI as a Go implementation.
2022 May
Azure Container Apps became generally available as a managed serverless container service. It added revisions, traffic shifting, and event or HTTP scaling without exposing Kubernetes API operations.
2022 May
Kubernetes 1.24 removed dockershim from kubelet. Runtime integration became an explicit cluster design and migration concern.
2022 May
Microsoft introduced the Microsoft Entra product family with Azure AD, Permissions Management, and Verified ID. The identity scope expanded beyond the original directory product.
2022 May
The project announced metrics release candidates with shared metadata and semantic conventions alongside tracing. The Collector could also receive OpenTelemetry and Prometheus-compatible metrics.
2022 May
Kubernetes made volume expansion stable after alpha and beta releases. Expansion still depended on a StorageClass that permits it and a driver that supports it.
2022 May 3
Kubernetes 1.24 finishes the transition begun in 1.20: clusters now need containerd, CRI-O, or another CRI-compliant runtime, with Docker-built images continuing to run unchanged since they follow the OCI image spec.
2022 May 03
Before 1.24 the control plane created a permanent Secret-based token for every ServiceAccount. From 1.24 it does not, leaving projected, short-lived tokens from the TokenRequest API as the default workload credential.
2022 May 4
Pulumi added a YAML runtime for smaller declarative definitions while retaining core features such as resources, outputs, providers, and stacks.
2022 Jul
AWS Single Sign-On is repositioned as the recommended workforce identity service, connecting users to AWS accounts and applications through an organization instance.
2022 Jul
Batch introduced a managed service for scheduling batch jobs at scale. Finite queued work gained a dedicated Compute Engine-backed execution model.
2022 Aug
Cluster peering arrived in beta as a looser multi-cluster model than WAN federation, alongside UDP health checks and transparent proxying through terminating gateways.
2022 Aug
Kubernetes 1.25 made Pod Security Admission stable, providing a built-in admission path for Pod Security Standards profiles.
2022 Aug 25
Kubernetes 1.25 shipped PSA as stable and removed PSP entirely, so workload hardening became a namespace label rather than a policy object bound through RBAC. Clusters still using PSP had to migrate before upgrading.
2022 Nov
Autoclass automated storage-class placement from last-access behavior for newly created buckets. Unknown access patterns could use a managed policy instead of fixed lifecycle transitions.
2022 Nov
Provides a managed event data store for querying and analyzing CloudTrail activity events, extending IAM audit capability beyond trail-based delivery to S3.
2022 Nov
Cross-account observability introduced monitoring and source account roles for metrics, logs, and traces in one Region. Multi-account troubleshooting gained an explicit sharing model.
2022 Nov 2
Pulumi announced managed deployments and the general availability of Pulumi YAML, extending how updates could be initiated and authored.
2022 Dec
Google made AlloyDB for PostgreSQL generally available. The service positioned PostgreSQL compatibility with managed scale-out compute and storage for modernization work.
2023 Jan
Work on the FinOps Open Cost and Usage Specification moved from a FinOps Foundation working group to a Joint Development Foundation project. Common billing-data requirements became a formal specification effort.
2023 Jan
The open billing work migrated into the FinOps Open Cost and Usage Specification project, creating a vendor-neutral billing-data specification effort.
2023 Feb
All remaining legacy ACL functionality was deleted, closing the multi-year migration started with 1.4; the experimental WAL log storage backend also appeared for Raft persistence.
2023 Apr
A further third-party audit was published in full, establishing repeated external review as a norm for the project rather than a one-off exercise.
2023 Apr
AWS announced Amazon Bedrock as a managed service for accessing foundation models from AI21 Labs, Anthropic, Stability AI, and Amazon, alongside Titan image and text models, positioned as the serverless alternative to running model infrastructure.
2023 Apr
Cloud Run jobs made run-to-completion scripts a first-class serverless resource. Finite container tasks no longer needed to be shaped as HTTP services.
2023 May 16
The second-generation KMS provider reworked encryption at rest around key hierarchy, rotation, health checks, and observability, addressing the performance limits that discouraged KMS v1 adoption.
2023 Jun 12
Terraform v1.5 added import blocks and configuration generation for imports. Adopting an existing object could be reviewed in the normal plan and apply workflow.
2023 Jul
Microsoft renamed Azure AD to Microsoft Entra ID while retaining capabilities, licensing plans, sign-in URLs, APIs, and existing configurations. Documentation and operating vocabulary shifted without a required migration.
2023 Jul
OpenCensus repositories were archived as OpenTelemetry reached feature parity across major language implementations. Migration from separate tracing and metrics projects shifted toward the combined OpenTelemetry ecosystem.
2023 Sep
Bedrock became generally available, adding agents for multi-step tasks and bringing Meta Llama 2 into the model catalog. GA marked the shift from preview experiment to a platform with a support surface.
2023 Sep
The Linux Foundation announced OpenTofu as an open-source alternative to Terraform. IaC selection now included project governance and license posture alongside language and provider support.
2023 Sep
OpenTofu was announced as an open-source fork of Terraform after HashiCorp changed Terraform's license. Teams gained another state-and-provider workflow for reviewing and applying infrastructure definitions.
2023 Oct
AWS announced a separate European cloud for data residency, operational autonomy, and resiliency requirements. Region selection expanded into a broader sovereignty and operational-boundary decision.
2023 Oct
Gateway, GatewayClass, and HTTPRoute reached the stable v1 API, making their shared boundary-routing model a production API surface.
2023 Oct
Gateway, GatewayClass and HTTPRoute graduated to v1, establishing a stable role-oriented routing API.
2023 Oct 4
Terraform v1.6 added a native test framework for validating Terraform modules and configurations. Module authors gained a workflow for checking expected behavior before consumers run a production plan.
2023 Oct 10
Google Cloud identified cost allocation as necessary for understanding who spends what before calculating business value. Allocation moved beyond bill reporting into unit-economics analysis.
2023 Oct 10
Pulumi introduced ESC for composing environments, secrets, and configuration across infrastructure and application tools.
2023 Nov
Autoclass became available for existing buckets. Teams could adopt access-based class management without recreating a bucket.
2023 Nov
AWS introduced Guardrails for Amazon Bedrock in preview, configurable safeguards that filter undesirable content from user inputs and model responses independently of the chosen model.
2023 Nov 28
S3 Express One Zone added directory buckets in a selected Availability Zone for latency-sensitive object workloads. Object storage choices could trade regional scope for a single-Zone placement.
2023 Nov 29
AWS introduced SageMaker HyperPod, purpose-built infrastructure for distributed training with automated node health checks, fault replacement, and checkpoint-based resumption across thousands of accelerators.
2023 Nov 30
SageMaker Studio gained a redesigned web interface with Code Editor and flexible spaces alongside faster onboarding, and the original experience was renamed Studio Classic, maintained but closed to new onboarding.
2023 Dec
Amazon Bedrock Knowledge Bases reached general availability, adding managed retrieval augmented generation with connectors to Amazon S3 and other data sources.
2023 Dec
ReadWriteOncePod added a cluster-wide single-Pod access mode for CSI volumes. It closed the gap where ReadWriteOnce allowed multiple Pods on the same node to write.
2023 Dec
The Technical Advisory Council approved wording that describes FinOps as an operational framework and cultural practice centered on business value, timely decisions, and collaboration.
2023 Dec 13
Kubernetes 1.29 marked KMS v2 stable. KMS v1, deprecated in 1.28, was disabled by default from the same release and requires an explicit feature gate to use.
2024 Jan 17
Terraform v1.7 added removed blocks for declaring that Terraform should stop managing an object without destroying it, and continued expanding the test workflow. State transitions became more expressible in configuration.
2024 Feb
Peering gained failover, mesh-gateway local mode, and default enablement, completing the second multi-datacenter model alongside WAN federation; Consul dataplanes removed client agents from Kubernetes nodes.
2024 Feb
Amazon Bedrock Agents became generally available, letting a foundation model orchestrate multi-step tasks with API calls and knowledge base access under AWS-managed orchestration.
2024 Mar
The Foundation published revisions that updated the definition and reorganized Framework domains, capabilities, and Personas around current practice.
2024 Mar
Guardrails for Amazon Bedrock became generally available, extending filtering to personal information protection, denied topics, and word filters alongside the original content filters.
2024 Mar
Packer 1.11 restricted plugin loading to the plugin directory and required accompanying SHA256SUM files.
2024 Apr
Kubernetes 1.30 shipped 45 enhancements across stable, beta, and alpha stages. Regular releases continued to make compatibility review and upgrade preparation recurring operational work.
2024 Apr 24
Policy rules written in CEL began running inside the API server as a declarative alternative to validating admission webhooks, removing an external HTTP callout from the admission path for many organizational rules.
2024 Apr 26
SageMaker Edge Manager was discontinued, removing the managed edge fleet tooling and leaving Neo compilation plus self-managed deployment paths for edge workloads.
2024 May
Gateway API 1.1 expanded conformance coverage and advanced service-mesh support, clarifying portability expectations across implementations.
2024 May
Gateway API v1.1 added stable GRPCRoute and service-mesh support, extending the portable route model beyond the initial v1 resources.
2024 Jun
DNS queries began defaulting to a rebuilt server compatible with both catalog generations, and the API gateway gained Prometheus metrics and file-system certificates.
2024 Jun
Application Signals became generally available as an OpenTelemetry-compatible application monitoring capability. It added prebuilt service health views and SLO-oriented application telemetry in CloudWatch.
2024 Jun 6
A decade on, Kubernetes counts more than 88,000 contributors from over 8,000 companies across 44 countries — evidence the desired-state model this course teaches outgrew any one vendor.
2024 Jun 19
AWS made fully managed MLflow tracking servers generally available on SageMaker, replacing Experiments Classic for experiment tracking and registering MLflow models into the SageMaker Model Registry automatically.
2024 Jun 20
The FinOps Foundation announced FOCUS 1.0 general availability. A common billing-data format supported cross-provider cost analysis, allocation, budgeting, and forecasting workflows.
2024 Jul
AWS announced cross-Region inference, letting applications call an inference profile that routes requests across compatible Regions to pool capacity during high-demand periods.
2024 Aug
Cloud Run added preview support for NVIDIA L4 GPUs. Some real-time, compute-intensive container workloads could use the managed-container execution model without moving to a VM or Kubernetes cluster.
2024 Aug
Google added Frankfurt, London, Zurich, and Belgium dual-region pairings. Location selection gained more documented options for European residency and redundancy requirements.
2024 Aug 1
Azure documented resource-based rules that distribute selected source costs to targets with fixed proportions. Native allocation controls made rule definitions deployable and reviewable.
2024 Sep 18
ESC became generally available, formalizing the service's role for environment, secret, and configuration management.
2024 Oct
The Technical Advisory Council approved Scopes to capture the technology cost and usage contexts to which practitioners apply FinOps concepts.
2024 Nov
RCPs complement SCPs by setting maximum permissions on resources rather than principals, closing the governance gap for resource-based access across an organization.
2024 Nov 7
FOCUS 1.1 added columns and metadata improvements for more granular multi-cloud billing analysis. Standardized billing data reduced the normalization work ahead of allocation.
2024 Dec
Amazon Bedrock added batch inference for asynchronous queued workloads and prompt management, rounding out the cost-control and reuse levers around on-demand token pricing.
2024 Dec 3
AWS renamed Amazon SageMaker to Amazon SageMaker AI and positioned it inside the next-generation SageMaker platform alongside Lakehouse, governance, and Unified Studio, while API namespaces and tooling kept the sagemaker names.
2025 Jan
Packer 1.12 added support for associating uploaded software bills of materials with HCP Packer artifact versions.
2025 Mar
Framework 2025 made Scopes a core element and reflected a Cloud-plus approach that can include technology spending beyond public cloud.
2025 Jul
AWS announced Amazon Bedrock AgentCore, a platform for deploying and operating production agents with any framework, with sessions, memory, observability, and connectors, marking the shift from single agent features to an agent operations platform.
2025 Aug
HashiCorp began moving many maintained Packer plugins from GitHub releases to its official release site.
2025 Oct
Service registrations gained an optional ports parameter for multi-port discovery, IPv4 and IPv6 dual-stack support landed for VMs and Kubernetes, and OIDC login for the UI adopted PKCE.
2025 Oct
Amazon Bedrock AgentCore reached general availability, and the original Bedrock Agents service began its transition to maintenance mode as new agentic investment concentrated in AgentCore.
2026 May
The 2.0 line arrived with an Envoy 1.37 baseline, hardened HTTP server timeouts for blocking queries, certificate expiry monitoring, and enterprise additions such as a dynamic global RPC rate limiter and multi-port mesh routing.