Infrastructure as Code
August 1, 2024
Terraform, Terragrunt, and CloudFormation research modules, state management, policy scanning, and multi-environment promotion patterns.
Research focus
Infrastructure as Code (IaC) enables repeatable, auditable cloud provisioning. This track covers module design, remote state, workspace strategy, and security scanning before terraform apply.
Core questions
- How should modules be versioned and consumed across teams?
- What state backend layout supports disaster recovery and least privilege?
- Which policies must block apply vs warn in CI?
Related documentation
- DevSecOps pillar: IaC policy as code (Checkov, OPA)
- Cloud Platform: provider-specific resource patterns