Thoughts on Terraform state management, infrastructure parallelism, and building better developer tools.
Northflank reported a security incident on October 30, 2026. Terrateam and Stategraph rotated every secret kept in Northflank shortly after and were not impacted. You do not need to do anything.
Maintaining cloud infrastructure compliance depends on what happens before the apply, not just what a scanner catches afterward. See what that requires in our guide.
A Terraform audit has to cover code, run history, state, and backend access, not just login logs. Here's the four-layer framework and the tools that help.
Terraform ephemeral resources keep secrets out of state and plan files. Here's how the ephemeral block's lifecycle works, and how to use one.
IaC security covers scanning, policy-as-code, and blast-radius awareness. See which risks each layer stops, and which ones risk slipping through.
IaC scanning tools aren't one category. Compare 12 real options across four categories, with GitHub star counts verified live via the API.
Infrastructure as code tools span provisioning, config management, scanning, and GitOps workflows. Compare 13 real options with verified GitHub stars.
A Terraform security checklist covers scanning and secrets, but not blast radius or state locking. See what a full review actually requires.
Learn what Checkov is, how a Checkov Terraform scan works, how to wire it into GitHub Actions, and why passing a scan doesn't mean staying compliant.
Terraform remote state helps share output values across configurations, but broad state access can expose more data than each module needs.
Learn how to deploy HashiCorp Vault on AWS using Terraform, configure high availability, and enable AWS KMS auto-unseal to maintain secure secret management.
Learn how to run tfsec and Checkov in GitHub Actions to block insecure Terraform changes, interpret findings, and customize rules for your org.
Infrastructure automation is about collaboration through pull requests, not CPU cycles. That's why we charge per user instead of per runner, making security best practices free instead of premium features.
Integrate with your repo's CODEOWNERS file to ensure the right teams approve infrastructure changes
Add manual approval gates for failed checks, enabling human judgment when automated validations flag issues
An in-depth analysis using Claude, ChatGPT, and Mistral
Learn how to structure Terraform modules for long-term maintainability, apply security best practices, and handle updates without breaking production. Covers versioning strategies, the moved block, migration patterns, and secure secret management.
A hands-on guide to shift left security and best practices for embedding policy-as-code, secret scanning, and CI/CD checks into your Terraform pipeline.
A technical guide for DevOps and platform teams looking to extend GitOps practices to Terraform-based infrastructure workflows, including CI/CD setup, policy enforcement, and tool comparisons.
A Terraform-first guide to secure GitOps secrets management using Infisical, OIDC, and Terrateam. Learn how to manage ephemeral secrets without storing them in Git.
Learn how to manage LaunchDarkly feature flags using Terraform in a secure GitOps workflow with Terrateam.
Terrateam switched its HTTP library to libcurl but we ran into some unique issues during development
How to handle concurrency, drift, and secrets management when scaling Terraform pipelines.
This blog explains how to manage Terraform projects using GitFlow workflow, a structured branching strategy that organizes feature development, releases, and hotfixes.
This blog outlines best practices for using Terraform in CI/CD pipelines, including state management, testing, secure secrets handling, etc., to ensure consistent and reliable deployments.
Learn practical approaches to organizing Terraform code in complex environments. Discover techniques for building reusable modules, managing configuration across environments, and scaling infrastructure code for production.
See how the merge function can allow you to combine and efficiently manage and use configuration maps in Terraform. Learn how to make practical use of infrastructure as code to streamline your infrastructure.
Customize Terraform workflows with Terrateam to add security checks, compliance, and automation directly in GitHub pull requests.
Customize Terraform workflows with Stategraph Orchestration to add security checks, compliance, and automation directly in GitHub pull requests. Build secure, efficient infrastructure workflows with ease.
When should you build or buy? A recent blog post about Terraflow gives insight into the benefits and drawbacks of building your own solution.
This blog will look at the top 10 tools for OpenTofu in 2025. These tools help you improve security, control costs, and keep your code clean and organized. This blog will explain what each tool does, how it can help you, and provide simple hands-on examples.
This blog explores Terraform Taint, highlighting its purpose, practical use cases, and how it compares to alternatives like terraform destroy. Backed by real-world scenarios and community discussions, this guide helps you understand when and why taint is the preferred choice for resource recreation.
A comparison of Pulumi vs. Terraform, highlighting their strengths and differences in approach, language flexibility, and use cases, so you can determine which IaC tool best suits you.
Solving common limitations in Atlantis, Terrateam provides comprehensive, scalable, and secure solutions that streamline infrastructure workflows.
Learn how to simplify Terraform deployments and manage infrastructure dependencies with a layered architecture approach.
Learn about Open Policy Agent from first principles to when you're running an OPA policy against a Terraform plan and enforcing concrete security rules.
A guide to understanding Terraform's null resource, its use cases, and how to implement it for automation without creating infrastructure.
A guide on managing Terraform across multiple environments, focusing on how Terrateam simplifies infrastructure scaling and collaboration.
Learn how to manage locked Terraform state file using the terraform force-unlock command. This guide covers common use cases, step-by-step examples, and best practices to ensure smooth Terraform operations.
Streamlining Infrastructure Automation with Terrateam’s Centralized Configuration
Discover the improved Apply Requirements, offering greater control and security for infrastructure operations.
Resourcely is your paved road to secure, efficient, and easy-to-manage cloud infrastructure
Use of Boolean, Map,List, Data types
Learn how to integrate and manage Terrateam with GitHub Environments.
Summarizing the upcoming state encryption feature in OpenTofu 1.7
Store plan files on private s3 buckets and more
Terrateam Self-Hosted
Using Multiple AWS IAM Roles
Creating a Hello World! AWS Lambda Function with Terraform
Deploying Grafana with Terraform
Terraform Types Explained
Flying away from AWS
Announcing access controls for plan and apply operations
How Terrateam compares to standalone GitHub Actions for Terraform Automation
Useful pre-commit hooks for your Terraform repository
Migrating from Atlantis to GitHub Actions