Terraform

DevSecOps, Terraform

Automated Documentation Generation for Terraform Modules with terraform-docs

Ensuring our Terraform modules are well-documented is a key part of our development process. But, let’s be honest, keeping docs up-to-date is a tedious task! Luckily, there’s an efficient tool out there that makes the process simpler and quicker – terraform-docs! Terraform-docs is an open-source, cross-platform tool, that can automatically generate comprehensive documentation for your […]

DevSecOps, Terraform

Building a Production-Ready Azure VM Terraform Module

When I sit down to craft a Terraform module, I ask myself how future me—and the teams inheriting my code—will reason about every decision. I remind myself to start with clarity, keep security opinionated but flexible, and prove the workflow end to end before anyone else runs terraform apply. I literally keep a checklist on

AzureDevOps, DevSecOps, Git, GitHub, Terraform

Azure Terraform Conventions: How to Design & Enforce a Real-World Naming Strategy

Repository: https://github.com/SalehElnagar/azure-terraform-conventions This article walks through how to think about Azure naming conventions and how to turn those decisions into code using the azure-terraform-conventions GitHub repository. That repo contains: The goal is not “just use whatever the repo does”. The goal is: capture your organization’s naming decisions once, codify them with this library, and then

DevSecOps, Terraform

Turning an Ingress Migration into a Security Upgrade — with DevOps + Terraform IaC as the Backbone (NGINX → Azure Front Door + App Gateway/AGIC)

Ingress migrations are rarely “just routing.” They’re one of the few moments where you’re forced to touch the edge, which means you can also fix the stuff that quietly rots over time: The core move is simple: Don’t migrate YAML → YAML. Migrate to a desired state — and encode that state as Terraform. This

DevSecOps, Terraform

Why Secret Management Matters in Terraform on Azure

Infrastructure as Code (IaC) is now the standard way to manage and provision cloud resources, and Terraform is one of the most widely adopted tools to do this on Azure. But Terraform needs credentials to talk to Azure: client IDs, client secrets, certificates, tokens, subscription IDs, and more. Those credentials are extremely powerful. If they

DevSecOps, Terraform

Terraform Journey – Think as a DevOps Engineer

You know, when I first started using Terraform and Infrastructure as Code on Azure, I honestly didn’t realize how crucial static code analysis could be. At the time, I was more focused on just getting things deployed quickly into Azure subscriptions and keeping costs down. But as our Azure footprint grew—more resource groups, more VNets,

Scroll to Top