Every article tagged AWS, in one place.
Showing 3 articles
Clicking around a cloud console is fine once. For anything you need to repeat, review or recover, describe infrastructure in code. Terraform reads configuration files and creates, updates or deletes cloud resources to match. A first configuration # main.tf ter...
The state file is Terraform's memory: which real resources belong to which blocks in your code. For a team, it must be shared, locked during changes and protected, because it can contain secrets. An S3 backend with locking terraform { backend "s3" { bucket = "...
Storing cloud access keys as GitHub secrets works, but those keys live forever and can leak. With OpenID Connect (OIDC) , GitHub gives each workflow run a signed token, and your cloud exchanges it for temporary credentials. There are no keys to steal or rotate...
