12
votes
Is it safe to put SQL statements in my C# application?
The "we don't have the resources" line is a red flag to me.
You're either going to pay to do it right, or you'll have to pay for doing it wrong. I know which I'd pick.
While your use case is ...
- 3,347
9
votes
Accepted
Is it bad to leave Azure secrets keys as plaintext in my source code if I don't release the code, only the exe?
Yes, anyone can easily find the key.
The simplest method would be to use the .net development tools (available for free download from Microsoft) which contains a decompiler. Aim the decompiler at the ...
- 16.6k
8
votes
Accepted
What's more expensive on my server-side processing?
Unless you have millions of users, this is not going to matter at all, performance-wise - and even then it will be irrelevant compared to other concerns. Perfect example of premature optimization of ...
- 51.6k
8
votes
Accepted
Does it make sense to use both Cosmos DB and Elasticsearch?
Since I don't know everything about your usage, I cannot say what is the correct way for you.
What I can tell you is that mixing elastic with another DB is a legitimate and common course of action.
...
4
votes
When consuming an api, what is a good way to deal with their request limits?
If the service works by rejecting only requests that are above the limit, and not just killing the whole service for you, then you could implement similar algorithm to how TCP works.
Simply said, ...
- 38.2k
4
votes
Accepted
What's stopping Cloud Platforms from owning the whole deployment process?
Taking your example of AWS, it can indeed manage the entire deployment process, including deploying the full environment from Cloud Formation config files through to the source code of the application....
- 39.6k
4
votes
Why running migration turns into timeout in a production environment?
You will need to look at the sql generated for the migration to determine why it is slow.
Possible reasons include:
Deadlocks with other queries
Rebuilding indexes
Moving lots of data around
Running ...
- 84.4k
4
votes
Azure Managed Identity and Zero Trust
If you would take Zero Trust to its extreme, you would not be able to use tokens to verify the authorization of a user, because when using a token you have to trust the service that issued the token ...
4
votes
How to deal with outdated PowerShell and Azure PS in Azure Automation?
This is not an Azure or Powershell forum, so let me try to write an answer from a general software engineering point of view.
It is not uncommon when developing software that the platform one is bound ...
- 220k
3
votes
Why should I use containers instead of deploying build artifacts directly to Azure App Services or AWS Elastic Beanstalk?
A full answer to your question depends on the complexity of deployment. If you are looking to host a single ASP.Net (core or classic) website, with no additional services, then I would recommend the ...
- 46.5k
3
votes
Accepted
Why should I use containers instead of deploying build artifacts directly to Azure App Services or AWS Elastic Beanstalk?
On a very high level, you are not missing out on anything crucial. Docker (and Kubernetes) provide a runtime environment, control plane, deployment, network abstraction etc. which are also provided by ...
- 2,947
3
votes
Can a Database Scale Up?
Of course you can scale databases.
Also, with a strict interpretation of monolith and microservice there generally shouldnt be this kind of performance scaling advantage to microservices. A monolith ...
- 84.4k
3
votes
DB migration and Azure deployment slots
Zero-downtime releases using Azure App Service slots and a single database shared by Staging and Production are possible - but you need to make sure that all database changes are backwards compatible, ...
- 141
3
votes
Accepted
Should my API return the image or path to an image?
Client -> API -> BLOB
Has the advantage that the Blob storage could be hidden from the outside, therefore from a security perspective thats quite nice. But on the other side the images have to ...
- 1,584
3
votes
Should my API return the image or path to an image?
As @DocBrown commented and in addition to the previous answers, you could answer the question by performing tests.
Which is more efficient? I think that services dedicated to one and only one job are ...
- 15k
3
votes
Improving performance of C# Azure function
For a function which involves
heavy data transfer over a network
external storage access to all the data processed
it is extremely unlikely switching between lists and arrays in C# will result in ...
- 220k
2
votes
Accepted
Managing/Designing actors and their state in Azure Service Fabric
There are quite a few approaches you can take depending on the problem you're trying to solve. I didn't quite understand the motivation behind having a separate Write Actor and a Calculator Actor. The ...
- 238
2
votes
Directly query database vs. Using web service
a WPF application that will deploy to ~50 users
Each user will probably make about 25 read/writes a day.
I have everything working in Azure but my issue/fear/question is I'm directly calling stored ...
- 59.5k
2
votes
Is it safe to put SQL statements in my C# application?
I will start by saying I agree that security is generally better handled by an application brokering between the client and database. This help by giving you "security in depth".
However I disagree ...
- 196
2
votes
Azure Key Vault vs Automation Account Variables for password storage
Had been exploring Azure Automation Account's (AAC) assets 'Variables' (encrypted and plain) and 'Credentials'. My conclusion for my situation is that using the AAC-only to store and retrieve resource ...
- 59
2
votes
Is it safe to put SQL statements in my C# application?
It's generally not safe to connect directly to an SQL server if the application is running on the client's machine.
If the client has the SQL connection string, then they can run whatever SQL their ...
- 84.4k
2
votes
Accepted
Pros and Cons of using ASPNET.Core In-Memory Caching instead of Redis?
First, it concerns me that that you use the word "instead". If you want your app to be robust and lightening fast, you should be utilizing both Redis and dotnetcore in memory caching.
Redis will ...
- 5,311
2
votes
What's more expensive on my server-side processing?
In most cases, an architecture should strive to minimize processing that is done on the database and should minimize the amount of logic deployed there as well. There are several reasons for this:
...
- 27k
2
votes
If my development machine is slow and has low end specifications, why can't I just rent a VM on Azure?
AWS offer a remote desktop product which maintains state and basically acts like a normal desktop.
At first I was skeptical of how fast this kind of thing would be for heavy tasks like running a ...
- 84.4k
2
votes
Should my API return the image or path to an image?
Without caching, both options always require two http calls.
Option 1: client -> API -> Blob.
Option 2: client -> API + client -> Blob.
With option 2 you get local caching in the users ...
- 4,984
2
votes
Looking for way to store, get, partially update few relatively small JSON documents which has different unique types
Your options are really use a database with JSON support, with the option of combining all the separate files into one big file or not. This lets everything work more or less the same and wouldn't be ...
- 13.5k
2
votes
How to do "initial sync" of data for new microservice that depends on data from another microservice?
If this is a one-off process, a backup/restore type process is probably the best way to go. Personally, I would suck it up and go with the RabbitMQ message route myself. Its less prone to mis-matched ...
- 304
2
votes
Accepted
Using Azure AD as an identity provider in Keycloak-based applications: how can I add missing user data to my client applications?
There is unfortunately no best answer here, Linus. Whether you add the data you mention to the claim or not entirely depends on the frequency of usage of the data.
If you are guaranteed to require the ...
- 10.4k
2
votes
Accepted
Can chatty microservices be okay to use if there is a specific use case for them?
As you identified yourself, the two services are very coupled together and that holds for both designs. Either they cannot be freely developed independently due to the shared database, or there is a ...
2
votes
Ideal design for reusing data across different environments
The ideal would be to have some test weather data which covered all possible test scenarios for your software.
Rather than pull live data and replicate it, create your own set of weather data and mock ...
- 84.4k
Only top scored, non community-wiki answers of a minimum length are eligible