weekly.tf - Issue #78 - Previews with Terraform CDK, OIDC with GitHub Actions, open-source infrastructure, Support open-source maintainers, HashiCast

The DevSecGuide to Infrastructure as Code includes research on the state of open-source IaC security, tips for embedding automated security throughout the entire development lifecycle, and advice for building a DevSecOps culture. Download the guide for free from Bridgecrew!

Adam Buggia explains how to implement the recently supported AWS Identify Federation for GitHub Actions and provides links to all the building blocks (Terraform modules). AB: Similar topic was described in this blog post by Robert Hafner which was mentioned in issue #60.

Very good open-source infrastructure project by Canadian Digital Service featuring Localstack, Terragrunt, and GitHub Actions. AB: Check out another open-source infrastructure project by U.S. Tax Court (from issue #40).

Terraform provider registry written in Rust. AB: Probably, the first one in Rust.

This episode features Betajob’s Anton Babenko, a long-time contributor and community member of the HashiCorp Terraform ecosystem. AB: We talked about what I’ve been doing at the beginning of my career, how I have decided to start with Terraform, and what I am looking into next…