Medium

Anton Babenko

Anton Babenko

·

5d ago

Issue #295 — Secretless Azure pipelines, RDS passwords in Secrets Manager, Terraform Kubernetes…

No stored secrets in your Azure DevOps pipeline, RDS passwords that live in Secrets Manager and never touch your code, a clear rule for…

Anton Babenko

·

Nov 1

Issue #294 — Stop minting secrets, start catching drift: Vault, OIDC, minimal-refresh, tfdrift in…

This issue is about trusting your infrastructure a little less and verifying it a lot more. Short-lived credentials replace forever-valid…

Anton Babenko

·

Oct 27

Issue #293 — AI Agents Write Terraform, Security as Code Guards It, a Cost Anomaly Detector Watches…

AI agents now write Terraform at machine speed, so this issue looks at what keeps them honest: pipeline gates and drift checks, a…

Anton Babenko

·

Oct 19

Issue #292 — Terraform vs Crossplane for platforms, Terragrunt Stacks, import blocks in modules and…

Is Terraform even the right tool for developer platforms? This issue weighs it against Crossplane, then gets practical with Terragrunt…

Anton Babenko

·

Oct 19

Issue #291 — Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module…

Less Terraform, more control is the theme, with owner tags in an OpenTofu fork, a clear apply gate for the Terraform MCP server, and a tidy…

Anton Babenko

·

Oct 19

Issue #290 — Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies…

Least privilege takes center stage, from Pinterest’s role-chained provisioner pipeline to IAM policies drafted by AI. Add Tofu Controller…

Anton Babenko

·

Oct 19

Issue #289 — Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE…

AI agents want to poke cloud APIs directly, but the strongest case this week is for keeping Terraform in the loop. Six golden rules for…

Anton Babenko

·

Oct 8

Deliberation Dashboard: see and analyze your consensus results

A follow-up to “Meet Deliberation”: what changed between v3.5.2 and v3.28.0, and why the numbers only started changing my config once I…

Deliberation Dashboard: see and analyze your consensus results

Anton Babenko

·

Sep 18

Issue #288 — Why self-service infra fails, judging 3.4M

Platform teams and AI agents hit the same wall this week, and it is made of people and judgment rather than code. Dirk Avery shares what…

Anton Babenko

·

Sep 17

Issue #287 — Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored…

Private module autocomplete turns out to be broken by design, because terraform-ls only ever talks to the public registry. Also inside: why…

Anton Babenko

Anton Babenko

AWS Hero / Terraform influencer — compliance.tf + weekly.tf + serverless.tf + http://bit.ly/terraform-youtube

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech