Home

Terraform Weekly

A weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

Written by

Anton Babenko

Connect

Issue #294 - Stop minting secrets, start catching drift: Vault, OIDC, minimal-refresh, tfdrift in GitHub Security and WAF labels with tf-nag scans

Issue #293 - AI Agents Write Terraform, Security as Code Guards It, a Cost Anomaly Detector Watches Your Bill, plus OpenDepot, terragucci at Scale, and Remote EU Jobs

Oct 21, 2026

•

3 min read

Issue #293 - AI Agents Write Terraform, Security as Code Guards It, a Cost Anomaly Detector Watches Your Bill, plus OpenDepot, terragucci at Scale, and Remote EU Jobs

Issue #292 - Terraform vs Crossplane for platforms, Terragrunt Stacks, import blocks in modules and Karpenter on EKS

Oct 14, 2026

•

1 min read

Issue #292 - Terraform vs Crossplane for platforms, Terragrunt Stacks, import blocks in modules and Karpenter on EKS

Issue #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savings

Oct 7, 2026

•

2 min read

Issue #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savings

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Sep 30, 2026

•

2 min read

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Sep 23, 2026

•

3 min read

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Sep 16, 2026

•

2 min read

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Sep 9, 2026

•

2 min read

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Sep 2, 2026

•

2 min read

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

...

Archive

Issue #294 - Stop minting secrets, start catching drift: Vault, OIDC, minimal-refresh, tfdrift in GitHub Security and WAF labels with tf-nag scans

Issue #293 - AI Agents Write Terraform, Security as Code Guards It, a Cost Anomaly Detector Watches Your Bill, plus OpenDepot, terragucci at Scale, and Remote EU Jobs

Issue #292 - Terraform vs Crossplane for platforms, Terragrunt Stacks, import blocks in modules and Karpenter on EKS

Issue #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savings

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Terraform Weekly