weekly.tf - Issue #140 - Terraform Multi-Account Deployments, Best Practices for AWS Step Functions, Hidden Dangers of Remote-Exec Provisioner, Reproducible Golang Builds for AWS Lambda, tfparse for parsing HCL using native Go library, Policy as Code framework

Let’s review different ways to organize our terraform code to work for multi-account deployments.

The authors at AWS introduce best operating practices on project structure, modules, parameter substitution, and remote state for users to deploy Step Functions state machines.

The remote-exec provisioner in Terraform can be a valuable tool, but it can also pose significant security risks to your infrastructure without proper control and awareness.

Mike Schouw describes how to achieve reproducible builds for Golang to declutter deployment pipelines and increase your resiliency for production releases. AB: Read this to save time if you use Golang with AWS Lambda.

Python extension for parsing Terraform/HCL. AB: Using native Go library under the hood.

Policy as Code framework to control your Terraform deployments with HCL files. AB: Potentially useful for people who don’t want to learn OPA/Rego and love HCL.