Phase 0, Part 1: Turning Copy-Pasted Terraform Into a Reusable Proxmox Module
My original infrastructure is three bare-metal Proxmox machines clustered together. The clustering just makes administration a bit easier. Those run…
Team Management
⚑ Report a ProblemLatest Team Management news from Tech News
Infrastructure Drift: Detecting and Preventing It
Your Terraform says the firewall rule is A. The cloud console says it's B. Someone changed it manually and didn't tell anyone. This is infrastructur…
Your terragrunt (or terraform) plan is 4,000 lines. Only two of them matter.
You know the ritual. terragrunt run --all -- plan Then you scroll. Past forty units of Refreshing state… . Past the ninth identical count instance.…
Automating Dell PowerProtect Backup on AWS: A Terraform-Based Approach
Organizations running Dell PowerProtect backup on AWS face a recurring challenge: the multi-appliance ecosystem — PPDM (PowerProtect Data Manager),…
Building TNP: Why I Built an Enterprise-Realistic DevOps Lab (Part 0)
🧭 This is Part 0 of a 10-part series documenting a self-built, enterprise-realistic DevOps lab — modeled after a fictional fintech company, not a pi…
From Side Project to Production Tool: What 8 Releases of tfdrift Taught Me About Building DevOps Tooling
Three months ago, tfdrift was 60 lines of Python that shelled out to terraform plan and printed a colored table. Today it has incremental scanning,…
I built a free Azure naming tool that knows every resource type's rules
Every Azure team needs a naming convention, and Microsoft's Cloud Adoption Framework defines a good one. The annoying part is that the rules are sca…
One Block to Force a Default AWS Region Across Every Terragrunt Module
A quiet failure mode in multi-module Terragrunt setups: someone copies an existing module to bootstrap a new one, forgets to check the region in the…
Scaling Terraform Infrastructure Beyond a Single Team
When a single engineer manages all the Terraform in an organisation, everything is simple. One repo, one state, one pipeline, one set of credentials…
Managing Terraform Across Multiple Cloud Providers
Most organisations don't live in a single cloud. You might run compute in AWS, DNS in Cloudflare, identity in Azure AD, and logging in GCP. Terrafor…
Why Snap CD: Non-invasive Orchestration
Most infrastructure CD tools ask you to change the way you write Terraform. Some require a proprietary wrapper CLI. Others impose a specific directo…
Building a worker-evaluator retry loop in LangGraph (and where it bites you on Lambda)
Most agent demos stop at "the model called a tool and gave an answer." That answer is often wrong, and nothing in the loop notices. I wanted an agen…
[Databricks on AWS #2] RBAC on Databricks: Function-Role Groups, Workspace Assignment, and Why USER/ADMIN Isn't the Whole Story
📚 Series: Databricks on AWS (Part 2) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups ← you are here Compute Governance: Pool…
Splitting a Terraform Monolith into Smaller States
If your Terraform plans are slow, your blast radius is too wide, or multiple teams are stepping on each other's changes, it's time to split your mon…
Your Terraform Can Be Insecure: A Practical Look at Checkov
Infrastructure as Code makes cloud deployment faster and more consistent, but it also makes mistakes repeatable. A single insecure setting can be de…
Fix GitHub Copilot Terraform Security Risks Before They Hit Prod
Originally published on kuryzhev.cloud Copilot just autocompleted your security group with port 0–65535 open to the world — and terraform validate s…
Five Features I Shipped in tfdrift That Changed How We Handle Terraform Drift
Five Features I Shipped in tfdrift That Changed How We Handle Terraform Drift When I first released tfdrift, it did one thing: scan Terraform worksp…
Terraform vs Pulumi: IaC Tools Compared
Overview Terraform and Pulumi are the two leading infrastructure as code tools. Terraform uses HCL (HashiCorp Configuration Language) while Pulumi l…
I'm 62 and I built a self-hosted AWS drift detector because I was tired of spreadsheets
I came to programming late — I didn't get into this world until I was past 35, and I'm 62 now, still writing code every day. This is a "build in pub…
Terraform vs CDK vs Pulumi: Choosing Your Infrastructure-as-Code Tool
The IaC landscape split into two philosophies about a decade ago and hasn't fully resolved the argument since. On one side: declarative configuratio…
Building an Enterprise Progressive Delivery Platform on AWS EKS with Argo Rollouts, Prometheus, Grafana, Terraform, and GitHub Actions
A production-style DevOps project showing secure infrastructure provisioning, canary deployments, automated rollback, observability, CI/CD, and priv…
Building a PySpark and AWS Glue ETL Pipeline for Search Keyword Revenue Analysis
I published a public data engineering project that demonstrates a cloud-based ETL pipeline for analyzing web analytics search keyword revenue. The p…
173 Undocumented Security Findings in TerraGoat: What Standard IaC Scanners Miss (and Why Post-Quantum Matters)
TerraGoat is the canonical vulnerable Terraform repository maintained by Bridgecrew (now Prisma Cloud). It has over 5,000 GitHub stars and is used b…
Your Terraform estate documents itself now: meet iac-cartographer
"Wait: How many Terraform repos do we actually have? And what's in them?" If that question makes you wince, this post is for you. It started as a bo…
IaC Drift Is Inevitable — Design for Detection, Not Prevention
Drift is not a tooling failure. It is evidence that multiple control planes still exist. IaC drift detection is typically treated as an operational…
A hard-earned rule from incident retrospectives:
LinkedIn Draft — Workflow (2026-05-19) A hard-earned rule from incident retrospectives: Incident RCA without a data-backed timeline is just a story…
Least-Privilege CI/CD on AWS: The 4-Layer Pattern That Scales to 200 Pipelines
TL;DR CI/CD pipelines deploying to AWS need AWS Identity and Access Management (IAM) permissions to do their job, but giving them broad permissions…
Map Your Entire AWS Infrastructure in 60 Seconds
If you've ever inherited an AWS account, you know the feeling. You open the console, click around a few services, and realise pretty quickly that yo…