24posts ·all writing
· via Spacelift
A nine-step roadmap for modernizing an aging Terraform estate: state surgery, guardrails, self-service, and why AI enters the workflow last.
#iac #platform-engineering #ai-agents
· via Spacelift
How Claude Code fits IaC work in practice: a mental model, the use cases that pay off first, and the guardrails that keep an agent out of state.
#claude-code #iac #ai-agents
· via Gruntwork
Control Tower, LZA, account factories or custom: how the AWS landing zone build routes compare, and the account-structure decisions that age well.
#aws #platform-engineering #iac
· via Gruntwork
Six defense layers for running coding agents against IaC: credential isolation, permission modes, allow and deny rules, CLAUDE.md, hooks, sandboxing.
#claude-code #ai-agents #iac
· via Spacelift
Using Ansible as an IaC tool rather than only for config management: where it fits, its limits, and a worked example provisioning AWS resources.
#devops-tooling #iac
· via StackGuardian
Why teams move off Terraform after the licence change, when staying put still makes sense, and a migration path with a tested rollback to 1.9.x.
#terraform #iac
· via Spacelift
Running AI agents as production workloads: core deployment principles, Amazon Bedrock AgentCore, and a Terraform walkthrough for shipping an agent.
#ai-agents #iac #aws
· via Spacelift
A working taxonomy of IaC testing: static checks, unit, integration and policy tests, with examples per tool and a pipeline to hang them on.
#iac #devops-tooling
· via AWS
Security posture as an IaC problem: Control Tower controls, baseline account vending, centralized monitoring, audit trails and drift prevention.
#aws #iac
· via StackGuardian
Golden paths done properly: why standardization keeps failing, how to build paved roads teams actually use, the usual pitfalls and success metrics.
#platform-engineering #iac
· via Spacelift
Drift in CloudFormation stacks: how detection works, its blind spots, the remediation options and the practices that stop drift from coming back.
#aws #iac
· via StackGuardian
Cloud security practices made enforceable: the implementation challenges, the practices worth codifying and turning both into automated guardrails.
#iac #devops-tooling
· via Spacelift
Why teams overestimate their automation maturity: the gap between having pipelines and trusting them, the usual pitfalls, and ways to close it.
#opinion #iac #platform-engineering
· via StackGuardian
The case for self-service infrastructure: what it is, the value for teams and organizations, an implementation path and the honest challenges.
#platform-engineering #iac
· via AWS
Governance for big AWS estates: why reactive cleanup fails at scale, a proactive Terraform platform strategy and a real customer case applying it.
#aws #terraform #iac
· via Spacelift
Configuration drift explained properly: how it creeps in, what it breaks, examples from real setups, and the tools that detect and prevent it.
#iac #devops-tooling
· via Spacelift
CloudFormation templates explained: the key sections, how they turn into stacks, a worked example and the practices that keep templates readable.
#aws #iac
· via AWS
Bringing existing AWS networking under Terraform: why brownfield import hurts, a worked use case with ControlMonkey and life after the import.
#aws #terraform #iac
· via Spacelift
CDK for Terraform in practice: when writing infrastructure in a programming language pays off, the architecture, and a working AWS deployment demo.
#terraform #iac #aws
· via Spacelift
Three routes for automating Terraform beyond laptop applies: general CI/CD, purpose-built platforms, and scripting, with the trade-offs of each.
#terraform #iac #devops-tooling
· via Spacelift
The Terraform habits that keep estates workable: remote state with locking, module reuse, project structure and the practices that prevent rework.
#terraform #iac
· via Spacelift
Terraform outputs from basics to real use: declaring them, chaining them between configurations, sensitive values and the output command flags.
#terraform #iac
· via Spacelift
My Spacelift guide to Ansible playbooks: structure, variables, Vault for secrets, handlers, conditionals and loops, each with a runnable example.
#devops-tooling #iac
· via Spacelift
The Ansible starting point I wrote for Spacelift: concepts, installation, inventory, ad hoc commands and a first playbook, with a working demo setup.
#devops-tooling #iac