• Terraform Weekly
  • Posts
  • Issue #170 - Deep Dive Into Terraform Static Code Analysis Tools, Secure API Gateway, Event-Driven Architecture, AWS Secrets Manager

Issue #170 - Deep Dive Into Terraform Static Code Analysis Tools, Secure API Gateway, Event-Driven Architecture, AWS Secrets Manager

April 24, 2024

Terraform Weekly Sponsor

Do you want to become a sponsor and spread your message to more than 7K email readers? Send me an email

Articles 📚

A Deep Dive Into Terraform Static Code Analysis Tools: Features and Comparison

Serhii Vasylenko wrote a detailed comparison of key features of top Terraform static code analysis tools to enhance security and compliance in your infrastructure management.

devdosvid.blog/2024/04/16/a-deep-dive-into-terraform-static-code-analysis-tools-features-and-comparisons

Secure API Gateway with Cognito and Custom Domain in Route53 Using Terraform

Joel Wembo describes setting up a secure API Gateway with Cognito, combining it with Terraform Cloud for state management and GitHub Actions for CI/CD pipeline automation.

towardsaws.com/devops-automation-secure-api-gateway-with-cognito-and-custom-domain-in-route53-using-terraform-6162e572294b

Auto Scaling with CloudWatch Scaling Alarms using Terraform

Mattia Mazzari demonstrates how to trigger Auto Scaling activities based on CloudWatch metrics.

medium.com/@mattiamazzari/auto-scaling-with-cloudwatch-scaling-alarms-using-terraform-dbd83211fd17

AWS Event-Driven Architecture For Security

Jose Adailson De Sousa Silva explains how to create an alert monitoring system on AWS to get a warning when a specific resource is created. Using AWS EventBridge, Lambda, CloudWatch and SNS.

awstip.com/aws-event-driven-architecture-for-security-44a768b1e745

Securing sensitive data by using AWS Secrets Manager and HashiCorp Terraform - AWS Prescriptive Guidance

Best practices for using Terraform to rotate secrets, manage access to sensitive data, and store secrets in AWS Secrets Manager. AB: I find such Prescriptive Guides published by AWS often very useful.

docs.aws.amazon.com/prescriptive-guidance/latest/secure-sensitive-data-secrets-manager-terraform/introduction.html

Open-source projects 🤩

inkdrop-org/inkdrop-visualizer

Visualizes your Terraform. Inkdrop is a CLI tool that creates interactive diagrams to visualize your Terraform. It helps you onboard engineers, generate documentation, and understand dependencies faster.

github.com/inkdrop-org/inkdrop-visualizerg

🎥 Terraform AWS modules - Episode 116

Feedback ❤️

If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email.

Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues.

PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/

Glory to Ukraine! 🇺🇦