Utkarsh Kher walks through combining Semgrep with AI to bring precision to IaC security reviews across Pulumi, AWS CDK, and Terraform. Instead of a noisy general scan, Semgrep surfaces the exact IAM roles, S3 buckets, Lambda functions, and security groups for AI to analyze in depth with focused, repeatable checklists.

Mark Tinderholt tackles one of the most overlooked gaps in Azure automation: Entra ID identity management is still handled manually in most environments. By wiring the azuread provider into Terraform Stacks components and passing group IDs as outputs to role assignment resources, you close the loop and make least privilege something you actually enforce, not just aspire to.

Ninad Pundaliks goes well beyond the basic count-and-boolean pattern, showing how to evolve feature flags in Terraform through external scripts, typed variables, and ultimately JSONNet as a dedicated configuration layer. The result is infrastructure that handles complex rollouts, multi-region quirks, and tech-debt migrations at a much lower risk.

Kyler Middleton documents migrating an agentic Slack bot from Lambda to AWS AgentCore, a platform that keeps the agent running as a persistent service rather than a cold-starting function. The post kicks off a full series covering the MCP gateway, persistent memory, guardrails, and lessons learned from running a real AI agent in production.

How to design, build, and operate AI agents for infrastructure teams — safely. 13 chapters covering architecture, sandboxing, credentials, change control, observability, and more.

AWS AgentCore Agentic Slack Bot full architecture.

Preventive infrastructure-as-code compliance controls for Terraform modules. Enforces SOC 2, HIPAA, PCI DSS, and 30+ frameworks at the module level — before terraform apply. Start a free trial.