Полезные комментарии Дениса Астахова по поводу перехода Terraform на BSL лицензию:

https://www.youtube.com/watch?v=dr6cwY2WbZA

Отмечу по этому поводу следующее.

◾ "Создающие альтернативы продуктам Hashicorp" — это не только Terraform.

◾ Если Hashicorp, например, купит какую-то компанию в области предоставления облачных сервисов, то под это определение автоматически подпадут все облака.

◾ Потенциально такое определение распространяется на любой бизнес, а не только напрямую связанное с Terraform.

◾ Не всё так однозначно. ©

#Terraform #OpenTF

💥 OpenTF announces fork of Terraform:

https://opentf.org/announcement

#OpenTF #Terraform

​​🆕 CodeWhisperer + CloudFormation & AWS CDK & Terraform 🎉

https://docs.aws.amazon.com/codewhisperer/latest/userguide/language-ide-support.html

#CodeWhisperer #CloudFormation #CDK #Terraform

⚠ Execute malicious code on the terraform plan? Yes!

https://blog.plerion.com/hacking-terraform-state-privilege-escalation/

This is the case if someone has access to S3 bucket containing Terraform state file.

#security #terraform

Terraform by IBM — Done.

https://www.hashicorp.com/blog/hashicorp-joins-ibm

#terraform

​​Качественная статья о положении дел HashiCorp.

https://medium.com/@fintanr/on-ibm-acquiring-hashicorp-c9c73a40d20c

Вот, что может случиться, когда в ведущем продукте меняется open source лицензия. От даты изменения типа лицензии до продажи компании прошло 9 месяцев.

#Terraform

​​⚡️ Oracle switched from Terraform to OpenTofu

https://blogs.oracle.com/ebsandoraclecloud/post/ebs-cloud-manager-24111-now-available

▫ In this release, we have switched from Terraform to OpenTofu due to forthcoming Terraform licensing changes. You must therefore upgrade your Cloud Manager by June 30, 2024 at the latest.
▫ We highly recommend that you uptake this new release of Cloud Manager at your earliest convenience.

P.S. Лёд тронулся, господа присяжные заседатели!

#Terraform #OpenTofu

Terraform AWS Cloud Control Provider

provider "awscc" {
region = "us-east-1"
}

provider "aws" {
region = "us-east-1"
}

https://aws.amazon.com/blogs/devops/quickly-adopt-new-aws-features-with-the-terraform-aws-cloud-control-provider/

Terraform AWS Cloud Control Provider features:

▫️ Developed by AWS and HashiCorp over four years, leveraging the AWS Cloud Control API.

▫️ Supports new AWS services and features immediately upon release via automatic generation from AWS Cloud Control API.

▫️ Best for using newly released AWS features and services that are not yet available in the standard Terraform AWS Provider.

#Terraform

​​Terraform best practices from AWS

https://docs.aws.amazon.com/prescriptive-guidance/latest/terraform-aws-provider-best-practices/introduction.html

Backend

▫️ Use S3 for remote storage
▫️ Facilitate team collaboration
▫️ Separate the backends for each environment
▫️ Actively monitor remote state activity

Code

▫️ Implement a standard repository structure
▫️ Structure for modularity
▫️ Follow naming conventions
▫️ Use attachment resources
▫️ Use default tags
▫️ Meet Terraform Registry requirements
▫️ Use recommended module sources
▫️ Follow coding standards

Versions

▫️ Use the TFLint
▫️ Monitor new releases

Modules

▫️ Use variables for customization
▫️ Understand dependencies
▫️ Use trusted sources

#Terraform

​​Отличное сравнение security scan tools для Terraform

https://devdosvid.blog/2024/04/16/a-deep-dive-into-terraform-static-code-analysis-tools-features-and-comparisons/

▫️ KICS
▫️ tfsec
▫️ Trivy
▫️ Terrascan
▫️ Checkov
▫️ Semgrep

#Terraform