Terraform Weekly #278 - Scale Azure IaC on OpenTofu and AVM, clone full ECS stacks, govern Terraform on GitHub, master S3 lifecycle rules, and let AI review your PRs www.weekly.tf/p/issue-278-...

Issue #278 - Scale Azure IaC on OpenTofu and AVM, clone full ECS stacks, govern Terraform on GitHub, master S3 lifecycle rules, and let AI review your PRs

weekly.tf

Another open-source tool from building compliance.tf repro-lambda builds AWS Lambda zips outside Terraform: byte-identical on macOS and CI, uploaded to S3 by content hash, then promoted dev -> prod with no rebuild. Terraform reads s3_existing_package instead of rebuilding on every plan.

GitHub - antonbabenko/repro-lambda: Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf.

Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf. - antonbabenko/repro-lambda

github.com

Terraform Weekly #277 - Least-Privilege CI/CD with OIDC, AWS Sovereign Cloud in Terraform, a Bedrock-Powered SRE RAG Bot, and Why terraform plan Misses Your Drift www.weekly.tf/p/issue-277-...

Issue #277 - Least-Privilege CI/CD with OIDC, AWS Sovereign Cloud in Terraform, a Bedrock-Powered SRE RAG Bot, and Why terraform plan Misses Your Drift

weekly.tf

Terraform Weekly #276 - Terragrunt structure secrets, IaC that acts like software, Lambda on your own EC2, AzAPI unlocks Azure Actions, and AI that scans your Terraform www.weekly.tf/p/issue-276-...

Issue #276 - Terragrunt structure secrets, IaC that acts like software, Lambda on your own EC2, AzAPI unlocks Azure Actions, and AI that scans your Terraform

weekly.tf

Terraform Weekly #275 - AI through IaC and module design pain, isolating Terraform state, Vince Analytics on Azure Container Apps with AVM, meta programming Terraform www.weekly.tf/p/issue-275-...

Issue #275 - AI through IaC and module design pain, isolating Terraform state, Vince Analytics on Azure Container Apps with AVM, meta programming Terraform

weekly.tf

Released claude-delegator v1.13.0: - Grok (xAI) as 3rd provider - New Researcher + Debugger experts (7 in total) - /consensus: Claude commits a blind verdict before dispatching GPT/Gemini/Grok, then arbiter-mediated voting Prompts adapted from oh-my-openagent + PAL. github.com/antonbabenko...

GitHub - antonbabenko/claude-delegator: Ask Codex, Gemini/Antigravity, and Grok (xAI) for second opinions or arbiter-mediated consensus inside Claude Code.

Ask Codex, Gemini/Antigravity, and Grok (xAI) for second opinions or arbiter-mediated consensus inside Claude Code. - antonbabenko/claude-delegator

github.com

Terraform Weekly #274 - Agents write your infra code, Terraform 1.15 lands, Terragrunt splits state, Azure Copilot opens VS Code, plus Terraform Provider Query, Agent skill and Oxid www.weekly.tf/p/issue-274-...

Issue #274 - Agents write your infra code, Terraform 1.15 lands, Terragrunt splits state, Azure Copilot opens VS Code, plus Terraform Provider Query, Agent skill and Oxid

weekly.tf

One model is a guess. Three that agree is a plan. A single model is fluent and alone, so it rationalizes its first guess. You find out mid-execution. I shipped consensus: GPT + Gemini + Claude argue until they agree. Write-up: www.linkedin.com/pulse/one-mo... Repo: github.com/antonbabenko...

One model is a guess. Three that agree is a plan.

Why I shipped multi-model consensus as a plugin, plus two quieter tools that keep agents honest. Ask one model to plan something hard - a migration, a refactor, a cutover - and you get a fluent, confi...

linkedin.com

Terraform Weekly #273 - Boring Terraform beats clever, CUE schema validation, safe AVM module migrations with OpenRewrite, DriftGuard drift alerts, tfrev AI reviewer www.weekly.tf/p/issue-273-...

Issue #273 - Boring Terraform beats clever, CUE schema validation, safe AVM module migrations with OpenRewrite, DriftGuard drift alerts, tfrev AI reviewer

weekly.tf

Terraform Weekly #272 - Dao of Terraform Modules at scale, the case Terraform is dead, cleanup that saved 20 dollars, PCI-DSS GKE for FinServ, Waffle on Bedrock www.weekly.tf/p/issue-272-...

Issue #272 - Dao of Terraform Modules at scale, the case Terraform is dead, cleanup that saved 20 dollars, PCI-DSS GKE for FinServ, Waffle on Bedrock

weekly.tf

Terraform Weekly newsletter (weekly.tf) is looking for sponsors! Reach 13K+ DevOps/SRE professionals interested in Terraform, AWS, cloud infrastructure, and platform engineering. 30% open rate 14% click-to-open rate Want to get in front of this audience? Send me a DM for more info.

Home | Terraform Weekly

A weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

weekly.tf

Terraform Weekly #271 - Terragrunt RIP, Bedrock AgentCore via Terraform, ephemeral migrations, OIDC click-to-deploy on EKS, a HCP Terraform TUI, and DrogonSec www.weekly.tf/p/issue-271-...

Issue #271 - Terragrunt RIP, Bedrock AgentCore via Terraform, ephemeral migrations, OIDC click-to-deploy on EKS, a HCP Terraform TUI, and DrogonSec

weekly.tf

Terraform Weekly #270 - ISO 27001 on AWS with Terraform, S3 Files Kills SFTP, Terragrunt 1.0 Is Here, Claude Code for DevSecOps, and Compliance Resources www.weekly.tf/p/issue-270-...

Issue #270 - ISO 27001 on AWS with Terraform, S3 Files Kills SFTP, Terragrunt 1.0 Is Here, Claude Code for DevSecOps, and Compliance Resources

weekly.tf

Started a list so I can gather all the tools and relevant articles in one place. awesome-terraform-compliance - 50+ curated tools, frameworks, and resources specifically for Terraform and OpenTofu compliance. github.com/antonbabenko...

GitHub - antonbabenko/awesome-terraform-compliance: Awesome Terraform Compliance resources

Awesome Terraform Compliance resources. Contribute to antonbabenko/awesome-terraform-compliance development by creating an account on GitHub.

github.com

Terraform Weekly #269 - EKS Auto Mode Unpacked, Terraform Tips From the Trenches, Managing DNS and Domains With IaC, and a New Watchdog for Infrastructure Drift www.weekly.tf/p/issue-269-...

Issue #269 - EKS Auto Mode Unpacked, Terraform Tips From the Trenches, Managing DNS and Domains With IaC, and a New Watchdog for Infrastructure Drift

EKS Auto Mode: Simplify Kubernetes with Terraform Setup

weekly.tf

Terraform Weekly #268 - AWS Lightsail AI Agents, Faster Terraform Applies, Local RAG for IaC, Lifecycle Rules Without Forks, and Combining Argo CD With Terraform www.weekly.tf/p/issue-268-...

Issue #268 - AWS Lightsail AI Agents, Faster Terraform Applies, Local RAG for IaC, Lifecycle Rules Without Forks, and Combining Argo CD With Terraform

weekly.tf

Our blog post - a practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the Compliance.tf registry. tldr: "terraform init" is very quiet when something goes wrong. compliance.tf/blog/debuggi...

Debugging terraform init: 401, 403, 502, and What Your Headers Are Telling You | compliance.tf

A practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the compliance.tf registry.

compliance.tf

Terraform Weekly #267 - Terraform MCP Meets Local LLMs for Air-Gapped IaC, GitHub Actions Drift Detection, 5 Dev Tips, InfraKitchen, Terravision, and AWS Lambda VPC Compliance Explained www.weekly.tf/p/issue-267-...

Issue #267 - Terraform MCP Meets Local LLMs for Air-Gapped IaC, GitHub Actions Drift Detection, 5 Dev Tips, InfraKitchen, Terravision, and AWS Lambda VPC Compliance Explained

weekly.tf

You can't customize ignore_changes in #Terraform modules. This has been an open issue since 2015. So teams fork modules to add lifecycle blocks. We just shipped a way to stop doing that. Operational Rules - for now, 7 rules, applied at terraform init. compliance.tf/blog/stop-pa...

Stop Paying the Terraform Fork Tax | compliance.tf

Introducing Operational Rules — your platform standards, enforced at terraform init. No more forking modules to add lifecycle blocks.

compliance.tf

Terraform Weekly #266 - AWS ECS Explained, Guard Hook Workarounds, Pulumi as State Backend, and 90% Faster Terraform Testing with AI www.weekly.tf/p/issue-266-...

Issue #266 - AWS ECS Explained, Guard Hook Workarounds, Pulumi as State Backend, and 90% Faster Terraform Testing with AI

weekly.tf

Terraform Weekly #265 - Dropping Prod with Terraform, the terraform.applying Symbol, AI Agents vs IaC, and Terraform Internals Unpacked www.weekly.tf/p/issue-265-...

Issue #265 - Dropping Prod with Terraform, the terraform.applying Symbol, AI Agents vs IaC, and Terraform Internals Unpacked

weekly.tf

Terraform Weekly #264 - Semgrep Meets AI for IaC, Entra ID in Stacks, Feature Flags Beyond Booleans, AgentCore Bots, Terramate Infrastructure Self-Service www.weekly.tf/p/issue-264-...

Issue #264 - Semgrep Meets AI for IaC, Entra ID in Stacks, Feature Flags Beyond Booleans, AgentCore Bots

weekly.tf

Terraform Weekly #263 - Gemini CLI Review Agents, Reliable Databricks Deployments, S3 Lifecycle Automation, HCP Terraform AI Guardrails www.weekly.tf/p/issue-263-...

Issue #263 - Gemini CLI Review Agents, Reliable Databricks Deployments, S3 Lifecycle Automation, HCP Terraform AI Guardrails

weekly.tf

Terraform Weekly #262 - Terramate Environments, Landing Zone AI Agents, FastAPI Production Deployments, Terragrunt EKS Clusters, Route 53 DNSSEC Security, tfdocs-extras www.weekly.tf/p/issue-262-...

Issue #262 - Terramate Environments, Landing Zone AI Agents, FastAPI Production Deployments, Terragrunt EKS Clusters, Route 53 DNSSEC Security, tfdocs-extras

weekly.tf

Terraform Weekly #261 - Stategraph, Native Terraform at Scale, Event-Driven Translation, Infrastructure Layers, Plan-to-Markdown, Serverless CI/CD Pipelines www.weekly.tf/p/issue-261-...

Issue #261 - Stategraph, Native Terraform at Scale, Event-Driven Translation, Infrastructure Layers, Plan-to-Markdown, Serverless CI/CD Pipelines

weekly.tf

Terraform Weekly #260 - Preply's IaC Setup with Atlantis, Version Control with ASDF, Governance at Scale, ALB DNS Automation, and Graft's Module Overlay Pattern www.weekly.tf/p/issue-260-...

Issue #260 - Preply's IaC Setup with Atlantis, Version Control with ASDF, Governance at Scale, ALB DNS Automation, and Graft's Module Overlay Pattern

weekly.tf

Terraform Weekly #259 - Everything as Code (incl. DNS), Terragrunt at Scale, Cloudflare v4 to v5 Migration, Self-Hosted GitLab Runners, CloudSlash for AWS Cost Optimization, Terraform Skill www.weekly.tf/p/issue-259-...

Issue #259 - Everything as Code (incl. DNS), Terragrunt at Scale, Cloudflare v4 to v5 Migration, Self-Hosted GitLab Runners, CloudSlash for AWS Cost Optimization, Terraform Skill

weekly.tf

Terraform Weekly #258 - IaCConf, Multi-Environment GitHub Pipelines, ignore_changes Deep Dive, AWS Glue Data Exports, Terraform New Features, Agent Skill for Terraform and OpenTofu www.weekly.tf/p/issue-258-...

Issue #258 - IaCConf, Multi-Environment GitHub Pipelines, ignore_changes Deep Dive, AWS Glue Data Exports, Terraform New Features, Agent Skill for Terraform and OpenTofu

weekly.tf

I created a Claude skill called terraform-skill (terraform-best-practices + other trusted sources). In 2026, please stop saying "AI hallucinates with #Terraform". Use HashiCorp Terraform MCP + this skill so answers are grounded in real docs and battle-tested patterns. 🚀 github.com/antonbabenko...

GitHub - antonbabenko/terraform-skill: The Claude Agent Skill for Terraform and OpenTofu - testing, modules, CI/CD, and production patterns

The Claude Agent Skill for Terraform and OpenTofu - testing, modules, CI/CD, and production patterns - antonbabenko/terraform-skill

github.com

Terraform Weekly #257 - IaCConf, Terraform Secrets Protection, AI DevOps Agents, Pulumi's Multi-IaC Platform, Future of Open Source CDKTF, Terraform Қазақша (Kazakh) www.weekly.tf/p/issue-257-...

Issue #257 - IaCConf, Terraform Secrets Protection, AI DevOps Agents, Pulumi's Multi-IaC Platform, Future of Open Source CDKTF, Terraform Қазақша (Kazakh)

weekly.tf