• Terraform Weekly
  • Posts
  • Issue #197 - State in IaC tools, Terragrunt 1.0, Enabling Security Guardrails, AWS EKS access entries, Debug Your Infrastructure

Issue #197 - State in IaC tools, Terragrunt 1.0, Enabling Security Guardrails, AWS EKS access entries, Debug Your Infrastructure

October 30, 2024

Terraform Weekly Sponsor

Do you want to become a sponsor and spread your message to more than 9.500 email readers? Send me an email

Articles 📚

State in Infrastructure as Code tools

Brian Grant talks about the challenges with the state and why IaC tools like Terraform and Helm store it in the first place.

medium.com/@bgrant0607/state-in-infrastructure-as-code-tools-40515f7b4840

The Road to Terragrunt 1.0

Josh Padnick describes in lots of details the path forward for Terragrunt 1.0. Terragrunt Stacks and Terragrunt Remote Runners being some of the coolest announcements mentioned there. AB: I have been using Terragrunt since very early days 7 years, but recently switched to Terramate (I like it). Terragrunt still looks very promising.

blog.gruntwork.io/the-road-to-terragrunt-1-0-4d5a0b416086

Enabling Security Guardrails: Infra as Code with CDK for Terraform

Ashish Patel and Victor Chen describe how the Zip security team leveraged the Python CDK for Terraform (CDKTF) to enforce security guardrails for their AWS infrastructure. They provide example configurations and code to help other security teams build their own secure AWS infrastructure-as-code.

engineering.ziphq.com/enabling-security-guardrails-infra-as-code-with-cdk-for-terraform

Managing AWS EKS access entries with Terraform and OpenTofu

Saif Rajhi explains various ways to manage access in EKS with detailed comparison between the new EKS API and the old ConfigMap methods.

dev.to/aws-builders/managing-aws-eks-access-entries-with-terraform-and-opentofu-414

How to Differentiate Manual Changes from Terraform Changes in S3 Bucket

Kayathiri outlines the solution to track manual changes to S3 bucket which is managed by Terraform… and optionaly, do a public shaming via Slack 😀 

somameenakayathiri.medium.com/how-to-differentiate-manual-changes-from-terraform-changes-in-s3-bucket-51f2ff6ea725

Friendly Post (not sponsored) 🤩

Open-Source Projects 🤩

cloudandthings/terraform-aws-clickops-notifier

Get notified when actions are taken in the AWS Console.

github.com/cloudandthings/terraform-aws-clickops-notifier

Feedback ❤️

If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email.

Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues.

PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/

Glory to Ukraine! 🇺🇦