• Terraform Weekly
  • Posts
  • Issue #187 - AWS Default Risks with OIDC, Dependabot, Remotely Producing Terraform from an API, Backstage, CloudPosse Atmos, CloudFormation

Issue #187 - AWS Default Risks with OIDC, Dependabot, Remotely Producing Terraform from an API, Backstage, CloudPosse Atmos, CloudFormation

Terraform Weekly Sponsor

Do you want to become a sponsor and spread your message to more than 9.300 email readers? Send me an email

Articles 📚

Addressed AWS Default Risks: OIDC, Terraform and Admin Access

Eduard Agavriloae on preventing anonymous privilege escalation via misconfigured OIDC roles: defensive strategies and AWS's improvements.

hacktodef.com/addressed-aws-defaults-risks-oidc-terraform-and-anonymous-to-administratoraccess

Dependabot: GitHub, and Terraform versions management

Arseny Zinchenko explains how to set up version update checks for Terraform providers and modules with Dependabot in the GitHub repository.

rtfm.co.ua/en/dependabot-github-and-terraform-versions-management

Remotely Producing Terraform from an API

Tim Holm describes how Nitric (a tool that implements the “Infrastructure from Code” approach) supported Terraform (CDKTF and HCL) and Pulumi via a plugin interface using gRPC to decouple the cloud implementations from the infrastructure specifications. AB: Check out the Nitric blog and project for more details.

nitric.io/blog/terraform-api

Infrastructure Resource Creation with Backstage

Lucca La Fonte explores AWS resource creation (using SQS as an example) via the Backstage Software Templates plugin and how it helps application and platform developers deploy code faster, cleaner, and safer.

medium.com/building-inventa/infrastructure-resource-creation-with-backstage-f36ae01633b5

Mastering Infrastructure with CloudPosse Atmos and Terraform

Shrihari Haridas describes his experience with Atmos — an open-source tool for managing and orchestrating infrastructure and applications on cloud providers like AWS, GCP, and Azure.

shrihariharidas73.medium.com/mastering-infrastructure-with-cloudposse-atmos-and-terraform-fb69b740c4a1

 🟢 LIVE STREAM: Improving serverless.tf (serverless with Terraform)

Open-source projects 🤩

aperswal/CloudFormation_To_Terraform

The CloudFormation to Terraform Converter is a tool that simplifies migrating AWS CloudFormation templates to Terraform configuration files. AB: This tool still has some limitations that are worth checking before use, but it deserves a star on GitHub! :)

github.com/aperswal/CloudFormation_To_Terraform

Feedback ❤️

If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email.

Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues.

PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/

Glory to Ukraine! 🇺🇦