Infrastructure as Code with Terraform, Start Here
Why clicking in consoles stops working Your first cloud resources come from clicking. You open the AWS console, click through a wizard, create a serve…
Tech news from the best sources
Why clicking in consoles stops working Your first cloud resources come from clicking. You open the AWS console, click through a wizard, create a serve…
The Problem with Click-Ops Dashboards Your team has 200 dashboards. You don't know who owns them. Half are broken. The rest show yesterday's reality. …
Move an existing project, safely. Migrating from Terraform to OpenTofu is less an engine transplant than a badge swap. OpenTofu began as a line-for-li…
When hosting a scalable, multi-AZ 3-tier web application (like WordPress), storing media files locally on the EC2 instances is an architectural dead e…
Every Azure team needs a naming convention, and Microsoft's Cloud Adoption Framework defines a good one. The annoying part is that the rules are scatt…
A quiet failure mode in multi-module Terragrunt setups: someone copies an existing module to bootstrap a new one, forgets to check the region in the p…
If you've run Terragrunt across more than a handful of modules for a while, you've hit this: you want to reorganize your repo — rename a folder, group…
When a single engineer manages all the Terraform in an organisation, everything is simple. One repo, one state, one pipeline, one set of credentials. …
Most organisations don't live in a single cloud. You might run compute in AWS, DNS in Cloudflare, identity in Azure AD, and logging in GCP. Terraform …
If you're getting into infrastructure as code, you hit the same fork in the road I did: Terraform or Pulumi? Both let you define cloud infrastructure …
A harness for AI-era Terraform. I'm building one. For a while now I've been developing a harness for infrastructure-as-code as a private SDK and compi…
Abstract Infrastructure as Code (IaC) has turned cloud infrastructure into source code — and, therefore, into a valid target for Static Application Se…
Week 1 of a five-week Infrastructure-as-Code journey, told honestly: the 403s, the 400s, the missing resource, and the security group I got wrong twic…
Most infrastructure CD tools ask you to change the way you write Terraform. Some require a proprietary wrapper CLI. Others impose a specific directory…
Snap CD ships with a full supporting ecosystem — documentation, a Terraform provider, deployment references, a guided sample, and a migration tool. Th…
When Terraform Gets Slow Our Terraform state file grew to 500+ resources. Plans took 8 minutes. Applies timed out. State locking conflicts were daily.…
Infrastructure as Code (IaC) has revolutionized how we provision and manage cloud resources. Tools like Terraform, Pulumi, and OpenTofu allow us to de…
TL;DR: Application code isn't the only thing that ships vulnerabilities — your Terraform does too. I wrote an intentionally insecure AWS configuration…
terraform plan is honest about what it's going to do. The problem is it's also verbose, repetitive, and full of cosmetic changes (like recomputed tags…
Most agent demos stop at "the model called a tool and gave an answer." That answer is often wrong, and nothing in the loop notices. I wanted an agent …
Terraform manages dependencies between resources within a single state. The moment your infrastructure outgrows one state file — slow plans, wide blas…
Most infrastructure teams run Terraform from a CI pipeline. That pipeline has credentials — cloud provider keys, state backend tokens, maybe a vault t…
📚 Series: Databricks on AWS (Part 4) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups Compute Governance: Pools, Policies, Clus…
📚 Series: Databricks on AWS (Part 3) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups Compute Governance: Pools, Policies, Clus…
📚 Series: Databricks on AWS (Part 2) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups ← you are here Compute Governance: Pools,…
When to attach a ready made policy and when to write your own When you first start writing IAM setup in Terraform, the examples online can feel like t…
Abstract Application code isn't the only place a SAST tool belongs — infrastructure definitions are source code too, and misconfigurations written int…
If your Terraform plans are slow, your blast radius is too wide, or multiple teams are stepping on each other's changes, it's time to split your monol…
At some point every growing Terraform project hits a wall. Plans that used to finish in seconds now take minutes. Applies feel risky because hundreds …
Introduction**** In modern cloud environments, deploying an application on a single server is rarely enough. As user traffic increases, applications n…