tf-nag: offline AWS Solutions checks for Terraform plans
tf-nag is an offline Python CLI that checks Terraform plan or state JSON against the tf-nag AWS Solutions rules. It does not contact AWS. Rule IDs a…
Testing & QA
⚑ Сообщить о проблемеПоследние новости Testing & QA от Tech News
Все темы
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
Cloud Resume Challenge Week 3— Infrastructure as Code with Terraform and CI/CD with GitHub Actions
Chunk 3 is complete — and this one pushed me the furthest outside my comfort zone. Infrastructure as Code, remote state management, and a fully auto…
Cloud Resume Challenge - Building a Cloud-Native Portfolio
NOTE: This is my blog post for the Cloud Resume Challenge for my website . The Cloud Resume Challenge is a project comprised of a list of requiremen…
I Built a Serverless Resume Site on AWS. Here's Everything That Broke Along the Way
After a decade in insurance operations, I decided to make my pivot into cloud engineering official by doing the Cloud Resume Challenge ! I wanted to…
Как быстро влиться в чужой проект и не завалить коллег вопросами: тестируем Gemini Notebook
Обычный вечер понедельника. Я уже собирался уходить домой после работы, как вдруг зацепился за разговор коллег о неком Gemini Notebook. Стало интере…
Why Kubernetes, Terraform, and AWS Are Becoming Essential Cloud Skills in 2026 ☁️🚀
The cloud industry is changing fast. A few years ago, knowing how to launch a virtual machine was enough to get started with cloud computing. Today,…
OIDC: Keycloak setup for ALB Gateway API
Introduction In my previous article , I tested using ALB CRDs to offload JWT validation for OIDC-based authentication to the Amazon EKS Kubernetes A…
Daily Dose of DevOps — Terraform remote state explained
Terraform Remote State Explained Terraform is a powerful tool for infrastructure as code, but managing state files can be a complex task. The terraf…
Drift Detection Was Never the Hard Part — Here's What Production Teams Actually Need Next
When I started building tfdrift, the problem seemed simple: terraform plan tells you what changed, but not how much you should care . Severity class…
RAG Powered Apps with Amazon Bedrock, Part 2: Automating the RAG Pipeline with Terraform
Before you start: This picks up where Part 1 left off. From part 1, you would've learned how to setup a Bedrock Knowledge Base in the console. In ad…
Event-Driven AWS Security Automation: Real-Time Detection and Remediation with Terraform and Pulumi
cloudguard-pro is an event-driven AWS security platform that detects and automatically remediates cloud misconfigurations. Seven Lambda functions, a…
Automating Dell PowerProtect Backup on AWS: A Terraform-Based Approach
Organizations running Dell PowerProtect backup on AWS face a recurring challenge: the multi-appliance ecosystem — PPDM (PowerProtect Data Manager),…
Building TNP: Why I Built an Enterprise-Realistic DevOps Lab (Part 0)
🧭 This is Part 0 of a 10-part series documenting a self-built, enterprise-realistic DevOps lab — modeled after a fictional fintech company, not a pi…
С нуля до Junior DevOps в 2026 году. Часть 6.1. Terraform: Infrastructure as Code и создание инфраструктуры
В небольших проектах инфраструктуру можно создать вручную через веб-интерфейс облачного провайдера. Но если серверов десятки, а окружений несколько…
From Side Project to Production Tool: What 8 Releases of tfdrift Taught Me About Building DevOps Tooling
Three months ago, tfdrift was 60 lines of Python that shelled out to terraform plan and printed a colored table. Today it has incremental scanning,…
Managing Terraform Across Multiple Cloud Providers
Most organisations don't live in a single cloud. You might run compute in AWS, DNS in Cloudflare, identity in Azure AD, and logging in GCP. Terrafor…
Applying SAST to Infrastructure as Code: Scanning Terraform with Checkov
Abstract Infrastructure as Code (IaC) has turned cloud infrastructure into source code — and, therefore, into a valid target for Static Application…
Why Snap CD: An Extensive Supporting Toolset
Snap CD ships with a full supporting ecosystem — documentation, a Terraform provider, deployment references, a guided sample, and a migration tool.…
Securing Your Terraform Infrastructure with Checkov and GitHub Actions
Infrastructure as Code (IaC) has revolutionized how we provision and manage cloud resources. Tools like Terraform, Pulumi, and OpenTofu allow us to…
Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)
TL;DR: Application code isn't the only thing that ships vulnerabilities — your Terraform does too. I wrote an intentionally insecure AWS configurati…
The Right Way to Pair AI With Terraform Plans
terraform plan is honest about what it's going to do. The problem is it's also verbose, repetitive, and full of cosmetic changes (like recomputed ta…
[Databricks on AWS #3] Compute Governance on Databricks: Instance Pools, Cluster Policies, and Shared Clusters
📚 Series: Databricks on AWS (Part 3) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups Compute Governance: Pools, Policies, Cl…
[Databricks on AWS #2] RBAC on Databricks: Function-Role Groups, Workspace Assignment, and Why USER/ADMIN Isn't the Whole Story
📚 Series: Databricks on AWS (Part 2) Building a Databricks AI Platform on AWS RBAC with Function-Role Groups ← you are here Compute Governance: Pool…
Applying a SAST Tool to Infrastructure as Code: Scanning a Terraform Stack with Checkov
Abstract Application code isn't the only place a SAST tool belongs — infrastructure definitions are source code too, and misconfigurations written i…
Your Terraform Can Be Insecure: A Practical Look at Checkov
Infrastructure as Code makes cloud deployment faster and more consistent, but it also makes mistakes repeatable. A single insecure setting can be de…
Fix GitHub Copilot Terraform Security Risks Before They Hit Prod
Originally published on kuryzhev.cloud Copilot just autocompleted your security group with port 0–65535 open to the world — and terraform validate s…
Five Features I Shipped in tfdrift That Changed How We Handle Terraform Drift
Five Features I Shipped in tfdrift That Changed How We Handle Terraform Drift When I first released tfdrift, it did one thing: scan Terraform worksp…
Infrastructure as Code (IaC) is Not an Add-On
When rotations drift and no one remembers who changed what, the pager still works but trust erodes. Incident management belongs in Git, reviewed and…
Demystifying Terraform: Bridging the Gap Between Infrastructure and Cloud
Let’s face it, tech events are thrilling, but can also be quite overwhelming. I went to AWS Student Community Day on 1st November 2025 in Tirupati.…
Terraform vs Pulumi: IaC Tools Compared
Overview Terraform and Pulumi are the two leading infrastructure as code tools. Terraform uses HCL (HashiCorp Configuration Language) while Pulumi l…