Terraform Weekly
Posts
weekly.tf - Issue #109 - Terraform Resource Testing with JSON and Pytest, Serverless Ad Blocking, CI/CD for SPA on AWS, Pulumi, CloudFormation, STS Scope Down Policies

weekly.tf - Issue #109 - Terraform Resource Testing with JSON and Pytest, Serverless Ad Blocking, CI/CD for SPA on AWS, Pulumi, CloudFormation, STS Scope Down Policies

February 22, 2023

Terraform Resource Testing 101

Validate code quality with a Terraform plan using JSON and Pytest. AB: LOTS of valuable ideas I wish one day will become built-in into the Terraform core.

betterprogramming.pub/terraform-resource-testing-101-c9da424faaf3

Terraform Weekly’s Sponsor

Firefly's Cloud Asset Management solution enables DevOps, SREs, and Platform Engineering teams to control their entire cloud footprint and manage it more efficiently and consistently using Infrastructure-as-Code. Firefly can give you a centralized cloud inventory across multi-cloud, multiple accounts, K8s, and SaaS (such as Datadog, GitHub, Okta), showing which resources are managed by IaC and which are not. Then it can automatically transform unmanaged resources into Terraform, including dependencies and modules

Other articles

Save time with automated security checks of your Terraform scripts

Learn how to integrate Checkov into CodePipeline with fully automated pre-deployment compliance checks of your Terraform scripts, including built-in notifications.

aws.amazon.com/blogs/infrastructure-and-automation/save-time-with-automated-security-checks-of-terraform-scripts

Serverless Ad Blocking with Cloudflare Gateway

Marco Lancini describes how he blocked advertisements in his home office, mimicking the Pi-hole's behavior, using only serverless technologies (Cloudflare Gateway, to be precise). AB: There is a link to the Terraform module, which deploys an ad-blocking solution.

blog.marcolancini.it/2022/blog-serverless-ad-blocking-with-cloudflare-gateway

Enabling CI/CD for Single Page Application using AWS S3, AWS CodePipeline, and Terraform

This blog discusses the concepts of continuous integration and continuous development and how to implement them with AWS and Terraform

towardsaws.com/enabling-ci-cd-for-single-page-application-using-aws-s3-aws-codepipeline-and-terraform-fb52f338a4e8

Comprehensive IaC comparison: Terraform vs Pulumi vs CloudFormation

AWS CloudFormation, Pulumi, and Terraform are the most popular IaC options cloud developers use to provision AWS cloud resources. AB: Yet another comparison but with some more recent facts.

argonaut.hashnode.dev/comprehensive-iac-comparison-terraform-vs-pulumi-vs-cloudformation

Robust logical isolation using AWS STS Scope Down Policies

Conor Maher explores approaches to tenant isolation in AWS. Including a terraform / boto3 demo for hardened tenant isolation in a SaaS environment.

conormaher.com/robust-logical-isolation-using-aws-sts-scope-down-policies

Open-source projects

utils/terraform/cloudflare-gateway-adblocking

This module automates the setup needed to mimic the Pi-hole's behavior using only serverless technologies.

github.com/marco-lancini/utils/tree/main/terraform/cloudflare-gateway-adblocking

Feedback ❤️

If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email.

Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues.

PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/

Glory to Ukraine! 🇺🇦