• Terraform Weekly
  • Posts
  • weekly.tf - Issue #114 - Terraform Security Best Practices, Upcoming Changes in AWS provider v5, Terraform with Amazon CodeCatalyst, Access to DynamoDB, Terraform Modules for Azure, Secure Terraform and Azure Environment, Private Terraform modules, Value Provider, CloudFormation CLI

weekly.tf - Issue #114 - Terraform Security Best Practices, Upcoming Changes in AWS provider v5, Terraform with Amazon CodeCatalyst, Access to DynamoDB, Terraform Modules for Azure, Secure Terraform and Azure Environment, Private Terraform modules, Value Provider, CloudFormation CLI

March 29, 2023

Terraform Security Best Practices

Terraform is a common tool for working with IaC, but its security best practices must be followed carefully. This article provides that guidance.

sysdig.com/blog/terraform-security-best-practices

Terraform Weekly’s Sponsor

Other articles

[Announcement] Upcoming Changes in Version 5.0 of the AWS Provider · Issue #29842

AB: The upcoming major release primarily focuses on removing caveats on the Default Tags and improvements in the RDS resources.

github.com/hashicorp/terraform-provider-aws/issues/29842

Bootstrapping your Terraform automation with Amazon CodeCatalyst

A walk-through of how to set up Terraform with Amazon CodeCatalyst from scratch to create a CI/CD pipeline for your infrastructure.

www.buildon.aws/tutorials/bootstrapping-terraform-automation-amazon-codecatalyst

The Many Ways to Access DynamoDB

AB: Another post by SymOps describing different IAM policies to restrict access to DynamoDB.

blog.symops.com/2023/03/10/access-dynamodb

Creating Reusable Terraform Modules for Azure and Best Practices

AB: The post covers some caveats when creating and consuming Terraform modules on Azure. All recommendations also work for other Terraform providers, too.

medium.com/@ECD3/creating-reusable-terraform-modules-for-azure-and-best-practices-ba347d60e93e

Securing Your Terraform and Azure Environment: Best Practices and Strategies

AB: All recommendations are for Azure users.

medium.com/@ECD3/securing-your-terraform-and-azure-environment-best-practices-and-strategies-d7f5d79da595

How to access Terraform modules in another private repo using GitHub Actions

Having Terraform modules in a separate repo is a common practice to reuse modules over projects easily. But what’s the best way to access this private repo using GitHub Actions?

pascalnaber.wordpress.com/2023/03/16/how-to-access-terraform-modules-in-another-private-repo-using-github-actions

Open-source projects

pseudo-dynamic/terraform-provider-value

Value Provider for Terraform. AB: Potentially a life-saver until the root problem is fixed in the Terraform Core.

github.com/pseudo-dynamic/terraform-provider-value

rogerwelin/cfnctl

Cfnctl brings the Terraform CLI experience to AWS Cloudformation. AB: 🤔 

github.com/rogerwelin/cfnctl

Feedback ❤️

If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email.

Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues.

PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/

Glory to Ukraine! 🇺🇦