Josh Pollara argues that multi-state transactions in Stategraph make Terragrunt's run-order coordination layer obsolete by treating state as a graph database. Dependencies resolve natively, blast radius is visible before apply, and the procedural glue code disappears.

Tarlan Huseynov walks through standing up a full Amazon Bedrock AgentCore stack with one terraform apply: three runtimes, a Gateway with 21 tools, Cognito M2M auth, Cedar policies, and persistent memory. He also documents provider gaps and the null_resource workarounds needed today.

Tom Straub introduces a powerful interactive TUI and scriptable CLI for HCP Terraform and Terraform Enterprise. Browse workspaces, runs, and state with keyboard navigation, or run commands like tfx workspace list for CI automation, all powered by the same API client.

Drew Mullen documents how to add an ephemeral key path to a Terraform module without rotating existing user secrets. He explains why you cannot route ephemeral and non-ephemeral values through a shared local, why one() beats [0] with count, and how moved blocks save state.

Bhupesh Pandey walks through a click-to-deploy pipeline where GitHub Actions assumes an IAM role via OIDC, Terraform provisions VPC, EKS, ECR, ALB, and cert-manager, then CI pushes a Docker image and CD applies the manifests. The result is HTTPS-ready apps with no long-lived AWS keys.

Filipi Pires open-sourced a high-performance Go-based scanner that combines SAST across 20-plus languages, SCA for CVEs, secret detection with 50-plus patterns, and IaC misconfiguration checks for Terraform and Kubernetes. Output supports SARIF for direct GitHub Security upload.