Jack McBride warns how Terraform Cloud's "speculative plan" can be weaponised when an attacker exploits custom external data sources, leading to remote code execution on a runner, token theft, and full cloud pivot. He exposes how convenience can become a backdoor and underscores why scoping tokens tightly and enforcing Sentinel allow-lists is critical.

Arseny Zinchenko digs into a tricky Terraform issue where mixing data types with loops and indexes can unexpectedly force resource replacements. He explains how unstable indexing causes identity shifts and shows how to avoid surprises by using stable keys instead.

Rajesh Singh highlights two simple but powerful safeguards to stop Terraform from accidentally deleting critical resources. He explains how lifecycle prevent_destroy and provider-level protections can save you from costly mistakes.

Sourav Kundu outlines 17 essential considerations before designing Terraform modules: including scope, versioning, testing, documentation, security, cost, usability, and repository architecture. All these are important to ensure your modules are reusable, maintainable, and aligned with organizational needs. This guide helps you avoid common pitfalls and build modules that teams will actually want to use.

Lookup resource attributes in tfstate.

I recommend this project by Luc van Donkersgoed (fellow AWS Hero) to help you keep track of AWS news and blogs in one place. See what's hot, read summaries, search, set bookmarks and ratings, and categorize articles with tags.