Home

Terraform Weekly

A weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

Written by

Anton Babenko

Connect

Issue #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savings

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Sep 30, 2026

•

2 min read

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Sep 23, 2026

•

3 min read

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Sep 16, 2026

•

2 min read

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Sep 9, 2026

•

2 min read

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Sep 2, 2026

•

2 min read

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Issue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

Aug 26, 2026

•

2 min read

Issue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

Issue #284 - Automate Terraform tests, scan IaC with Trivy, block bots with AWS WAF, harden AWS the right way, and run your own OpenTofu registry

Aug 19, 2026

•

2 min read

Issue #284 - Automate Terraform tests, scan IaC with Trivy, block bots with AWS WAF, harden AWS the right way, and run your own OpenTofu registry

Issue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

Aug 12, 2026

•

1 min read

Issue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

...

Archive

Issue #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savings

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Issue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

Issue #284 - Automate Terraform tests, scan IaC with Trivy, block bots with AWS WAF, harden AWS the right way, and run your own OpenTofu registry

Issue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

Terraform Weekly