"Moving Beyond ClickOps: The Intimidation and Freedom of Infrastructure as Code" by Juan Naranjo
#infrastructure-as-code #devops #aws-cloudformation #developer #terraform

"Moving Beyond ClickOps: The Intimidation and Freedom of Infrastructure as Code" by Juan Naranjo
#infrastructure-as-code #devops #aws-cloudformation #developer #terraform
"Stop Overpaying for Secrets You Never Rotate: Migrate to SSM Parameter Store with Terraform 🔐" by Suhas Mallesh
#aws-secrets-manager #devops #terraform #cost-optimization
New insight: When choosing a Terraform registry module, always verify its source code rather than relying solely on the README. It saved us from a critical bug in production. Check out the examples for better understanding. #terraform #codingbestpractices
Two devs, one terraform apply, no state lock: that's your cloud gone. Terraform state is the soul of your infra. Remote locking is not optional.
#terraform #devops #iac
Discover how the Graphalgo campaign weaponized the Terraform Registry and Go modules. Learn about this supply chain attack linked to the Lazarus Group.
#Terraform #CyberSecurity #SupplyChainAttack #GoModules #LazarusGroup
The bottom line: CDK for Terraform (CDKTF) is worth evaluating if your team already writes TypeScript or Python. YAML/HCL at scale has cognitive limits. #Terraform
Attackers use #Terraform Registry as a #malware channel. Two malicious providers delivered Go malware with #Slack and #blockchain command channels, extending a campaign already seen across npm and PyPI. Infrastructure as code is now "infection as code":
👇
Learn how to detect malicious Terraform providers. New malicious Terraform providers spread Graphalgo Go malware through typosquatted packages.
#Terraform #Graphalgo #SupplyChain #GoMalware #CyberSecurity
Crear VM en Azure con Terraform: guía real 2026
¿Se puede crear una VM en Azure con Terraform sin usar el portal? Sí, y acá están los 8 recursos clave y los errores reales que aparecen en 2026
Terraform Azure VM Linux: guía con estado remoto 2026
Descubrí cómo desplegar una VM Linux en Azure usando terraform azure vm linux y remote state paso a paso. ¡Empezá tu implementación ahora mismo!
#terraform #azure #infraestructuracomocódigo #linux #devops
🚀 STACKIT PostgreSQL Flex API v3 is now generally available. Granular user & role management, custom resource labels, and instance protection against accidental deletion — via API, CLI & Terraform.
The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths
https://commons.now/link/the-malware-hiding-in-developer-tools-that-turned-terraform-providers-into
Por qué CloudWatch no muestra memoria RAM en EC2
¿Por qué no ves la memoria RAM EC2 CloudWatch por defecto? Te explicamos el motivo, qué agente instalar y cómo solucionarlo. ¡Enterate ahora!
"Terraform on AWS: 7 State Mistakes That Cost a Rollback" by Jorge Hermes
#terraform #infrastructure-as-code #devops #cloud-security #aws-builders
Researchers found Go malware delivered through 2 Go Modules and 2 Terraform providers, the first known abuse of HashiCorp's registry as a malware channel, tied to North Korea-linked campaigns. #HashiCorp #Terraform #NorthKorea
📢 Campagne Graphalgo : malware Go distribué via des providers Terraform et des modules Go
Cet article présente une analyse technique détaillée d'une extension de la campagne Graphalgo, initialement rapportée par ReversingLabs en…
🟢 vérification factuelle haute
#Graphalgo #Terraform #Cyberveille
Illegal Terraform providers seen delivering Go malware via blocchain & Slack C2. Vet supply chains carefully. #SupplyChain #Terraform #GoLang #Malware #Blockchain https://thedailytechfeed.com/malicious-terraform-providers-linked-to-dprk-delivered-go-malware-via-terraform-registry/
Six Terraform dirs. One provider. 4.9 GB on disk.
`terraform init` downloads into each directory's `.terraform/`. Nothing is shared.
export TF_PLUGIN_CACHE_DIR="$HOME/.terraform.d/plugin-cache"
mkdir -p "$TF_PLUGIN_CACHE_DIR"
The mkdir is not optional.
300 lines of Python to parse Terraform state and plan files, flagging resources changed outside your IaC. Advanced. https://www.valtersit.com/python/terraform-state-parser-for-drift-detection/ #terraform #python #cloud
Graphalgo hid malware in Terraform providers & Go modules—Slack, blockchain & trigger-based payloads now part of the game. #Malware #DevTools #Terraform #GoModules #Graphalgo #CloudSecurity https://thedailytechfeed.com/terraform-providers-hijacked-malware-lurking-in-dev-tools/