Open Policy Agent (OPA) with Terraform: enforce security, tagging, and cost policies on every plan. Covers Rego v1 syntax, Conftest, GitHub Actions CI/CD integration, and env zero.
Terraform backends are a native Terraform feature, which saves the state file in a remote location, rather than a local file. Terraform backends make sure that the work on the stack stays true to the state of our resources, and that we don’t run over our colleagues' work.
Terraform Cloud is a hosted service developed by HashiCorp that provides a collaborative workspace for teams to use Terraform, an open-source Infrastructure as Code (IaC) software tool. It enables teams to manage infrastructure provisioning, compliance, and management across various cloud providers, data centers, and services. This tutorial will walk you through the key features and benefits of Terraform Cloud.
Terraform CLI is a command-line interface tool that enables you to manage Infrastructure as Code (IaC) using the HashiCorp Configuration Language (HCL). With Terraform CLI, you can define, provision, and manage infrastructure resources in a human-readable format that can be versioned, reused, and shared across teams.
Terraform 'for' expression is widely used, particularly in Terraform Modules. A "For Expression" allows you to create complex type values by transforming other complex type values. This feature is not only beneficial in modules but also in your Main Infrastructure Code.
Terraform is a powerful infrastructure as code (IaC) tool that enables you to define and manage your cloud infrastructure in a declarative manner. One of the key features of Terraform is the ability to use variables, which allow you to parameterize your configurations and make them more flexible and reusable.Did you know that you could also order Domino's Pizza with Terraform? In this blog post, we will have fun with the Domino's Pizza Terraform provider while exploring the world of Terraform variables. We'll understand how to effectively use them in your infrastructure deployments.
Terragrunt keeps Terraform configurations DRY across environments. Covers run-all, remote state management, and module patterns with practical examples.
Atlantis is a tool that automates Terraform operations through pull requests. It allows developers and operators to collaborate on infrastructure changes without leaving their version control system.
env0 has released 3 key features this month, directly helping new and existing customers. One of our features (Private provider registry) has already been covered in a separate blog—and this month's highlighted feature will be Remote state access control.
env0’s Provider Registry feature allows users to store Providers in a public or private repository and reference it for use within code. Best of all, you are able to pull different versions of the code with simple changes. When running inside env0 we will even handles the authentication without the need for any additional steps or configuration.
Terraform Plan aims to help you review and verify your configuration before applying it. It gives you a chance to catch any errors or inconsistencies in your terraform code, and to make sure that you are not making any unwanted changes to your infrastructure. It also helps you communicate and collaborate with your team members, by showing them what you intend to do and getting their feedback.
Infrastructure as Code is first and foremost code, and a chief principle of writing good software is leveraging abstractions to make your code reusable, scalable, and consistent. Terraform modules are the abstraction provided by HashiCorp to take logical groupings of resources and package them together in a reusable object.
Today, organizations are still figuring out how best to implement new IaC practices in their existing DevOps frameworks. This article covers a variety of options for multiple frameworks to support even the most demanding business-critical environments.
In this blog post, we examined three of the most popular tools to scan your infrastructure. These are Checkov, tfsec, and Terrascan. We saw the benefits and key features of each tool.
Terrascan is a tool that helps you to scan your Infrastructure as Code for security and compliance policy violations. It supports various IaC languages such as Terraform, Kubernetes, Dockerfile, and more.
tfsec is a security scanner for your Terraform code. It performs static analysis of your code and detects potential misconfigurations that could lead to security risks.
Checkov scans IaC for security and compliance issues. Covers Terraform, Kubernetes, and CloudFormation — and how to run it in env zero CI/CD pipelines.
In this blog post, we will compare three popular IaC scan tools: Checkov, TFsec, and Terrascan. We will compare them based on their features, performance, usability, and compatibility.
env0 works well for customers who already have infrastructure provisioned in the cloud. But what if you need to support infrastructure developers and still need the management layer that env0 provides? We refer to this process of creating new infrastructure through automation as “Day 0” environment creation. This post shows one such way of automating the creation of the env0 environment resources by using our TF provider and some shell magic.
As our codebase becomes more complex, it often becomes an issue to maintain one IaC stack for our entire deployment, and we might think of splitting our IaC stack into smaller, more manageable components, with the relevant IaC for the job. The question is how can we pass outputs between deployment stacks? Read on to learn more.
Many organizations work almost exclusively in their VCS. For these types of GitOps-style workflows, having to change from their VCS to another platform to handle IaC deployments was both time consuming, and represented an unnecessary distraction. Now, with PR Comment Commands, DevOps engineering can seamlessly interact with their env0 IaC deployment and management platform without ever leaving GIT.
In this blog post we’ll walk you through setting up your first monitoring and observability system to gather data about your systems, deployed in AWS cloud using env0.