Eliminate sensitive values from Terraform state using write-only attributes

Terraform has emerged as the infrastructure as code (IAC) tool of choice for organizations due to its intuitive approach to infrastructure provisioning, declarative syntax, extensive provider ecosystem, and robust CI/CD integration. In my previous note, we learned how to securely store secrets in AWS Secrets Manager using Terraform and GitHub Actions. But there’s a critical … Continue reading Eliminate sensitive values from Terraform state using write-only attributes

Manage sensitive variables in Amazon EC2 user data with Terraform and PowerShell

If you have worked with Amazon EC2 user data, you'd have noticed a shortcoming in the approach  -the inability to pass command-line arguments to the user data script at run time. Let me explain why I believe that to be a problem. User data is a capability associated with an Amazon EC2 instance as part … Continue reading Manage sensitive variables in Amazon EC2 user data with Terraform and PowerShell