Archive

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Sep 23, 2026

•

3 min read

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Sep 16, 2026

•

2 min read

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Sep 9, 2026

•

2 min read

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Sep 2, 2026

•

2 min read

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Issue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

Aug 26, 2026

•

2 min read

Issue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

Issue #284 - Automate Terraform tests, scan IaC with Trivy, block bots with AWS WAF, harden AWS the right way, and run your own OpenTofu registry

Aug 19, 2026

•

2 min read

Issue #284 - Automate Terraform tests, scan IaC with Trivy, block bots with AWS WAF, harden AWS the right way, and run your own OpenTofu registry

Issue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

Aug 12, 2026

•

1 min read

Issue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

Issue #282 - Multi-Account Terraform Done Right, Tracking Every Module Consumer, EKS Compliance as Code, Pulumi Speed Claims, and Reproducible Lambda Builds

Aug 5, 2026

•

2 min read

Issue #282 - Multi-Account Terraform Done Right, Tracking Every Module Consumer, EKS Compliance as Code, Pulumi Speed Claims, and Reproducible Lambda Builds

Issue #281 - Policy-gated Terraform auto-apply, GPU model serving on ECS, smarter module versioning, search vs azapi_resource_list, and a plan TUI

Jul 29, 2026

•

2 min read

Issue #281 - Policy-gated Terraform auto-apply, GPU model serving on ECS, smarter module versioning, search vs azapi_resource_list, and a plan TUI

Issue #280 - Crossplane vs Terraform, Spaghetti to GitOps, FinOps Guardrails with OPA, the Open Agent Runtime, and Release on Demand with Merge Trains

Jul 22, 2026

•

2 min read

Issue #280 - Crossplane vs Terraform, Spaghetti to GitOps, FinOps Guardrails with OPA, the Open Agent Runtime, and Release on Demand with Merge Trains

Issue #279 - Ownership-First Multi-Account AWS, NIS2 Azure Controls, Production SES with Terraform, Continuous Drift Monitoring, and Serverless CGM

Jul 8, 2026

•

2 min read

Issue #279 - Ownership-First Multi-Account AWS, NIS2 Azure Controls, Production SES with Terraform, Continuous Drift Monitoring, and Serverless CGM

1 2 3...25

Issue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection

Issue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild

Issue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

Issue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

Issue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

Issue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

Issue #284 - Automate Terraform tests, scan IaC with Trivy, block bots with AWS WAF, harden AWS the right way, and run your own OpenTofu registry

Issue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

Issue #282 - Multi-Account Terraform Done Right, Tracking Every Module Consumer, EKS Compliance as Code, Pulumi Speed Claims, and Reproducible Lambda Builds

Issue #281 - Policy-gated Terraform auto-apply, GPU model serving on ECS, smarter module versioning, search vs azapi_resource_list, and a plan TUI

Issue #280 - Crossplane vs Terraform, Spaghetti to GitOps, FinOps Guardrails with OPA, the Open Agent Runtime, and Release on Demand with Merge Trains

Issue #279 - Ownership-First Multi-Account AWS, NIS2 Azure Controls, Production SES with Terraform, Continuous Drift Monitoring, and Serverless CGM

Terraform Weekly

Home