Design IaC interfaces that work for humans, AI agents, and whatever comes next.

AI agents are changing who, or what, uses your Terraform modules. Join Jinger Meilani, Senior DevOps Engineer at MNTN, to learn what changes when the consumer is not human and which interface design principles still hold. Walk away with practical patterns for creating reusable, self-service building blocks that help non-infrastructure developers onboard faster and prepare your IaC for its next generation of users. Save your spot. July 14 | 12 PM EDT

Articles 📚

Multi-Account AWS Is About Ownership, Not Accounts

Mohit Gupta argues that going multi-account on AWS is about ownership boundaries, not account counts, and lays out a Management, Dev, and Prod model for small teams. He covers per-account state isolation, permission boundaries for self-service, and when Control Tower is overkill.

Medium • Mohit Gupta

NIS2 Article 21 in Azure: Implementing Network Security Controls with Terraform

Woitzik maps the network security requirements of NIS2 Article 21 to concrete Azure resources in Terraform, skipping legal theory for real code. The piece covers hub-and-spoke segmentation, default-deny NSGs, Azure Firewall egress control, private endpoints, and managed identities.

woitzik.dev/blog/nis2-article-21-azure-terraform

Demystifying AWS SES in Production: Multi-Tenant Architecture, Terraform Automation, and Lessons Learned

Mina Malak walks through building a secure, multi-tenant email pipeline on Amazon SES with Terraform, covering DKIM, SPF, DMARC, and the IAM Condition block gotcha that triggers 554 errors. He also shows how to pass the SES sandbox review first time and why plan-first stops drift.

Medium • Minamalak

Setting Up Continuous Terraform Drift Monitoring With GitHub Actions and Slack

Sudarshan Thakur shows how to catch Terraform drift automatically instead of finding it mid-deploy, with a GitHub Actions workflow that scans on a schedule and posts to Slack. Using his open-source tfdrift CLI, he filters by severity so only high and critical drift alerts you.

DEV Community

Open-source projects

pmalmirae/serverless-nightscout-on-aws

This is a from-scratch, serverless rebuild of Nightscout on AWS, written in Go and Terraform to pull glucose data from LibreLink Up and serve a Nightscout v1 compatible API. It runs on Lambda, DynamoDB, API Gateway, and CloudFront with Cognito auth for about 1.50 dollars a month.

GitHub

Feedback ❤

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via Twitter / X, LinkedIn, BlueSky, or simply reply to this email.

Sharing is caring! Please spread the word by sharing this newsletter with your friends and colleagues—it helps grow the Terraform community and supports this weekly effort.

Also, if you are working on compliance, security, or standardization for Terraform at scale, check out compliance.tf. It is a growing library of compliance-mapped Terraform modules and controls designed to make it easier to ship secure, audit-ready infrastructure with less friction.

PS: One of the best ways to support Ukraine is by donating to savelife.in.ua

Glory to Ukraine! 🇺🇦

Keep Reading

© 2026 Terraform Weekly.
beehiivPowered by beehiiv