Ad: See how PayFit promotes infra and app releases through one pipeline

Join us on September 2 (Wed) to learn how PayFit's platform team promotes every release the same way, Kubernetes services and Lambda functions alike. One path for app and infrastructure changes, so a release candidate proves itself before the next environment. It's how PayFit ships payroll for 22,000+ businesses. Save your seat.

Articles 📚

Control AWS Traffic: Smart Serverless Throttling

Chandra Prakash Reddy defines API Gateway usage plans, reserved Lambda concurrency, and AWS Budgets alarms entirely in Terraform, with limits that vary per environment. He also schedules EventBridge jobs to raise and lower rate limits by time of day.

DevOps Tour

Implementing AWS Well-Architected Agentic AI Lens with Bedrock AgentCore and HCP Terraform

Dr. Rahul Gaikwad turns the AWS Well-Architected Agentic AI Lens into working code: one IAM role per agent, Bedrock Guardrails for prompt injection and PII, token runaway alarms, and HCP Terraform workspaces wired together with run triggers and drift checks.

Medium • Dr. Rahul Gaikwad

How to provision an EKS cluster (AWS) with Terraform

Petru Gulian follows the HashiCorp EKS tutorial and hits two walls, an unsupported Kubernetes 1.29 and an AL2 AMI type capped at 1.32. He shows the exact main.tf edits that get the cluster running, then sent a pull request upstream so nobody repeats the detour.

Gulian Technology

We Replaced 60% of Terraform With CDK/Crossplane — The Patterns That Finally Made It Worth It

Mohab A. Karim describes cutting Terraform usage by roughly 60 percent with typed CDK constructs and Crossplane composites shipped as versioned infra libraries. Generated IaC lands as a reviewable diff in the pull request, and he is honest about the tradeoffs.

Medium • Mohab A.Karim

HashiCorp's tfpolicy Made Module Source a Policy Decision

I argue that the interesting part of tfpolicy is not the syntax but the setup stage, which runs before Terraform downloads anything. All a module_policy can do there is allow or deny a source string, so the catalog behind that name decides the outcome.

Compliance.tf • Anton Babenko

Remote EU Jobs

Three Terraform-heavy infrastructure roles, each takeable remotely from anywhere in the EU.

Site Reliability Engineer at Duvo (EU/UK remote)
gcp · kubernetes · terraform · docker · opentelemetry
Among the first members of a newly formed SRE team, inheriting 25+ Terraform modules and a full OpenTelemetry pipeline from the product engineers who have been holding infrastructure collectively. Band published up front at €110k-220k.

DevOps Engineer at Fundamental (Europe)
aws · gcp · kubernetes · terraform · argocd
Infrastructure as code across GPU-optimised Kubernetes clusters at a foundation-model company founded by DeepMind alumni, with GitOps delivery through ArgoCD and FinOps cost work in scope. Fully remote across Europe, no office requirement.

Engineering Manager, Platform Core at Pliant (EU/UK remote)
terraform · spacelift · aws · kubernetes · datadog
The first engineering-manager role for Platform Core: a team of four already running Pliant's core Terraform, multi-account AWS and IAM foundations, run as an internal product rather than a cost centre. The team is mid-migration from ECS to Kubernetes. A management role, not a hands-on IC one.

More EU-remote roles like these, biweekly from Jobs Brief. Free, every role takeable remotely from anywhere in the EU or from Poland, and every one taken straight from a company's own career page rather than aggregated from job boards.

Feedback ❤

If you have feedback to share or are interested in sponsoring this newsletter, feel free to reach out via Twitter / X, LinkedIn, BlueSky, or simply reply to this email.

Sharing is caring! Please spread the word by sharing this newsletter with your friends and colleagues—it helps grow the Terraform community and supports this weekly effort.

Also, if you are working on compliance, security, or standardization for Terraform at scale, check out compliance.tf. It is a growing library of compliance-mapped Terraform modules and controls designed to make it easier to ship secure, audit-ready infrastructure with less friction.

PS: One of the best ways to support Ukraine is by donating to savelife.in.ua

Glory to Ukraine! 🇺🇦

Keep Reading

View more
caret-right
© 2026 Terraform Weekly.
beehiivPowered by beehiiv