Stategraph: Deploy on AWS with Terraform Part 1

If you’re following the Infrastructure as Code space, Josh Pollara is a name you’ve likely encountered. While I haven’t personally tried terrateam, I’ve been following what he and his co-founders have been building. One of the most common questions I get from customers using Terraform is around state management. Most AWS deployments default to S3 as a backend (with DynamoDB for locking in pre-1.10 Terraform versions). The idea of exploring another mechanism in the state management space intrigued me, especially with promises around faster plans through their upcoming Velocity feature.

Read More

PRISM: Provider Resource Issue Scanning & Monitoring

Supporting the Terraform AWSCC provider as a triager with access to the service teams as I mentioned in CFn Schema versioning post, I do end up in situations where I need to ( or rather a Friday chore) review the new open issues against the provider. As with the previous post, the themes I see come up again and again are : Some input parameter being set as required/optional based on conditionals which a JSON schema cannot specify with the right urgency.

Read More

Terratags v0.8.0: Expanding Multi-Cloud Support

The Terraform ecosystem continues to evolve with tools and mechanisms that make infrastructure modelling , provisioning and management more consistent and maintainable. I like to announce that Terratags has just released version 0.8.0, bringing expanded support for additional providers. What’s New with v0.7.0 and v0.8.0 The latest releases continue to expand the support for additional providers: Google Cloud Beta Provider Support Terratags now supports the google-beta provider, which mirrors the implementation of the standard Google Cloud provider for labels.

Read More

Kiro has Terraform skills

Powers and now Skills. Kiro’s 1.24.0 version just added support for Skills, the new open spec for giving agents new capabilities and expertise. In a way. Let me explain. Naturally, I started using the kiro skills when the HashiCorp Sr PM for Agentic Workflows and a dear friend Gautam pinged asking if I tried the HashiCorp agent skills. Here is how I got along with it on kiro-cli which is my daily driver.

Read More

AWS CloudFormation Schema Version Tracker

Problem I have been supporting the Terraform AWSCC provider from the last couple of years documenting examples, contributing with small code changes and triaging issues with the provider usage. Some of the key themess I have found are: A valid json schema doesn’t always mean they would translate well with the provider. The provider has to take some specific steps to support some of the terraform workflows to ensure there is no drift when there isn’t one supposed to be.

Read More

2025

So , How was 2025 ? In really really short words, busy and fulfilling. When you look back , you always like to see the shiny stuff . The things that worked and where you did well. But it is criminally understated how many failures or rejections underpin some of those things what worked well. You get to that process of getting to do things well by learning from your failures.

Read More

RIV25: VPC encryption control: Terraform support

Its reInvent 2025 in two days. This will be the first time I will be there in person ever ( as an AWS employee or customer ). I should say more of my customer work kept me away from the announcements than an actually distancing myself from it :). But I have been keeping an eye out for some which fell into Terraform support ( especially ones which were in both the providers).

Read More

RIV25: Builders' sessions

This is my third year at AWS and I have been an AWS customer or using AWS services for years. But this is the first year that I get to attend reInvent. Am I stoked ? Yes, Absolutely. Add on to the fact that I am leading two Builders’ sessions which are on repeat has been absolutely wonderful. For my personality and character, I find it hard to network and these sessions when you are collaborating or working on the same goal helps me more than the audience in some cases - to evolve, learn more about self and so on.

Read More

Making AI Work for You: Terraform Engineer Blueprint - HashiConf 2025

Thanks to everyone who attended my HashiConf 2025 session on making AI work effectively for Terraform engineering! The response was incredible and the questions we got before and after showed how much the community is thinking about AI-assisted infrastructure development. Want to implement these patterns in your workflow? The techniques demonstrated work across different AI assistants and can be adapted to your team’s specific needs. The prompts and contexts used in the demos are available here.

Read More

Terraform Module Guard: Multi-Engine Policy Validation for Module Sources

It’s November already !!! Are you in the naughty list or nice list ? One of my wishlist items for HCP Terraform or Terraform enterprise has always been the ability to restrict what modules or providers can be used based on some list. Yes, if you have used GitHub actions the desire to have something similar comes from that interface of allowed actions. While that’s a wishlist item, I have had clients who had asked for mechanisms to do this using their existing policy as code frameworks.

Read More