Infrastructure as Code with Terraform, Start Here
Why clicking in consoles stops working Your first cloud resources come from clicking. You open the AWS console, click through a wizard, create a serve…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
tutorial
typescript
webdev
Observability as Code: Managing Dashboards and Alerts with Terraform
The Problem with Click-Ops Dashboards Your team has 200 dashboards. You don't know who owns them. Half are broken. The rest show yesterday's reality. …
Migrating from Terraform to OpenTofu, safely
Move an existing project, safely. Migrating from Terraform to OpenTofu is less an engine transplant than a badge swap. OpenTofu began as a line-for-li…
Decoupling & Securing Web App Storage: Building a Zero-Trust S3 Perimeter with Terraform
When hosting a scalable, multi-AZ 3-tier web application (like WordPress), storing media files locally on the EC2 instances is an architectural dead e…
I built a free Azure naming tool that knows every resource type's rules
Every Azure team needs a naming convention, and Microsoft's Cloud Adoption Framework defines a good one. The annoying part is that the rules are scatt…
One Block to Force a Default AWS Region Across Every Terragrunt Module
A quiet failure mode in multi-module Terragrunt setups: someone copies an existing module to bootstrap a new one, forgets to check the region in the p…
Renaming Terragrunt Projects Without Migrating State
If you've run Terragrunt across more than a handful of modules for a while, you've hit this: you want to reorganize your repo — rename a folder, group…
Scaling Terraform Infrastructure Beyond a Single Team
When a single engineer manages all the Terraform in an organisation, everything is simple. One repo, one state, one pipeline, one set of credentials. …
Managing Terraform Across Multiple Cloud Providers
Most organisations don't live in a single cloud. You might run compute in AWS, DNS in Cloudflare, identity in Azure AD, and logging in GCP. Terraform …
Terraform vs. Pulumi in 2026: Which Should You Learn First?
If you're getting into infrastructure as code, you hit the same fork in the road I did: Terraform or Pulumi? Both let you define cloud infrastructure …
You Can't Review an Agent. You Can Review a Plan.
A harness for AI-era Terraform. I'm building one. For a while now I've been developing a harness for infrastructure-as-code as a private SDK and compi…
Applying SAST to Infrastructure as Code: Scanning Terraform with Checkov
Abstract Infrastructure as Code (IaC) has turned cloud infrastructure into source code — and, therefore, into a valid target for Static Application Se…
I Built My First AWS Network with Terraform. Here's Everything That Went Wrong.
Week 1 of a five-week Infrastructure-as-Code journey, told honestly: the 403s, the 400s, the missing resource, and the security group I got wrong twic…
Why Snap CD: Non-invasive Orchestration
Most infrastructure CD tools ask you to change the way you write Terraform. Some require a proprietary wrapper CLI. Others impose a specific directory…
Why Snap CD: An Extensive Supporting Toolset
Snap CD ships with a full supporting ecosystem — documentation, a Terraform provider, deployment references, a guided sample, and a migration tool. Th…
Terraform at Scale: Lessons from Managing 500+ Resources
When Terraform Gets Slow Our Terraform state file grew to 500+ resources. Plans took 8 minutes. Applies timed out. State locking conflicts were daily.…
Securing Your Terraform Infrastructure with Checkov and GitHub Actions
Infrastructure as Code (IaC) has revolutionized how we provision and manage cloud resources. Tools like Terraform, Pulumi, and OpenTofu allow us to de…
Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)
TL;DR: Application code isn't the only thing that ships vulnerabilities — your Terraform does too. I wrote an intentionally insecure AWS configuration…
The Right Way to Pair AI With Terraform Plans
terraform plan is honest about what it's going to do. The problem is it's also verbose, repetitive, and full of cosmetic changes (like recomputed tags…
Building a worker-evaluator retry loop in LangGraph (and where it bites you on Lambda)
Most agent demos stop at "the model called a tool and gave an answer." That answer is often wrong, and nothing in the loop notices. I wanted an agent …
Why Snap CD: Modular Deployments
Terraform manages dependencies between resources within a single state. The moment your infrastructure outgrows one state file — slow plans, wide blas…
Why Snap CD: Self-Hosted Terraform Runners with Credential Isolation
Most infrastructure teams run Terraform from a CI pipeline. That pipeline has credentials — cloud provider keys, state backend tokens, maybe a vault t…
[Databricks on AWS #4] The BOOTSTRAP_TIMEOUT Mystery: Tracing a Databricks Cluster from Data Plane to Control Plane (Transit Gateway + Firewall)
📚 Series: Databricks on AWS (Part 4) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups Compute Governance: Pools, Policies, Clus…
[Databricks on AWS #3] Compute Governance on Databricks: Instance Pools, Cluster Policies, and Shared Clusters
📚 Series: Databricks on AWS (Part 3) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups Compute Governance: Pools, Policies, Clus…
[Databricks on AWS #2] RBAC on Databricks: Function-Role Groups, Workspace Assignment, and Why USER/ADMIN Isn't the Whole Story
📚 Series: Databricks on AWS (Part 2) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups ← you are here Compute Governance: Pools,…
Terraform guide to IAM Policies: The Two Cases You Need to Know
When to attach a ready made policy and when to write your own When you first start writing IAM setup in Terraform, the examples online can feel like t…
Applying a SAST Tool to Infrastructure as Code: Scanning a Terraform Stack with Checkov
Abstract Application code isn't the only place a SAST tool belongs — infrastructure definitions are source code too, and misconfigurations written int…
Splitting a Terraform Monolith into Smaller States
If your Terraform plans are slow, your blast radius is too wide, or multiple teams are stepping on each other's changes, it's time to split your monol…
The Problem with Large Terraform States
At some point every growing Terraform project hits a wall. Plans that used to finish in seconds now take minutes. Applies feel risky because hundreds …
Building a Scalable AWS Application Architecture: From EC2 to Load Balancer and Auto Scaling
Introduction**** In modern cloud environments, deploying an application on a single server is rarely enough. As user traffic increases, applications n…