Full build: the IAM policy, ~160 lines of FastMCP, two-layer redaction that fails closed, and what the door deliberately can't see
https://devtocash.com/blog/2026-09-20-terraform-state-mcp-server-read-only-ai-agents

Full build: the IAM policy, ~160 lines of FastMCP, two-layer redaction that fails closed, and what the door deliberately can't see
https://devtocash.com/blog/2026-09-20-terraform-state-mcp-server-read-only-ai-agents
#Terraform #ClaudeCode #AWS #GCP #PlatformEngineering
As we've all heard by now, LLMs are non-deterministic by nature.
A dropped connection during terraform apply wiped 40 resources and truncated state to zero bytes. Remote backends, locking, and workspaces with real production https://www.valtersit.com/guides/automation/terraform-state-management-backends-locking-workspaces/
#terraform #devops #infrastructure
Every waiver deserves a record. Who approved it, when it expires, why it exists. That's exceptions-as-code: infrastructure that remembers what humans forget. 🔍
#DevOps #Security #Terraform
IAM wildcards in Terraform. `Action: "*"` grants everything. DSalvus flags it. Fix: list explicit actions. That's the control. 🔐
#aws #terraform #security
DevOps / SRE / DevSecOps Engineer (AWS) - Remote, Latin America — bluelightconsulting
Guyana
DevOps / SRE / DevSecOps Engineer (AWS) - Remote, Latin America — bluelightconsulting
Suriname
DevOps / SRE / DevSecOps Engineer (AWS) - Remote, Latin America — bluelightconsulting
Guyana
DevOps / SRE / DevSecOps Engineer (AWS) - Remote, Latin America — bluelightconsulting
Suriname
VPC Endpoints: Gateway vs Interface en AWS explicado
Tu trafico a S3 pasa por el NAT gateway y lo pagas por GB? VPC endpoints gateway vs interface: cual usar, cuanto cuesta cada uno y como evitar el error ...
#aws #vpcendpoints #devops #networking #terraform
Paste your Terraform plan. Get a security grade in seconds—no signup, no account. We evaluate it in memory and discard it. Quick sanity check before you merge. 🔍
#Terraform #DevOps…
Probar alertas Terraform sin romper la guardia
¿Probás alertas Terraform y confiás en el estado firing? Separá regla y entrega, sumá un Job de Kubernetes y confirmá la evidencia antes de aplicar.
How to centralize Terraform across multiple teams. Shared state and OIDC federation, one execution model, policy as code, and drift detection you can schedule. #terraform
"Primeiros Passos com Terraform e AWS: Provisionando uma EC2 com Docker" by Helter Pitanga
#terraform #beginner-projects #amazon-ec2 #infrastructure-as-code #docker
DevOps / SRE / DevSecOps Engineer (AWS) - Latin America, Remote — bluelightconsulting
Suriname
DevOps / SRE / DevSecOps Engineer (AWS) - Latin America, Remote — bluelightconsulting
Guyana
DevOps / SRE / DevSecOps Engineer (AWS) - Latin America, Remote — bluelightconsulting
Guyana
DevOps / SRE / DevSecOps Engineer (AWS) - Latin America, Remote — bluelightconsulting
Suriname
#Istio #ServiceMesh #Terraform #EKS
Managing observability, security, and service-to-service communication gets complex as microservices scale. Traffic routing, mTLS, and circuit breaking are important. Implementing these typically means modifying application code. Istio
"The Transformation Diaries Week 7: Six Pillars, Fifty Problems" by Dinesh Sharma
#transformation #firewall #production #terraform #aws-cloudformation