Thoughts on Terraform state management, infrastructure parallelism, and building better developer tools.
Looking for Terragrunt alternatives? Six tools compared with honest pros and cons, plus how Stategraph works alongside Terragrunt or replaces it.
Terraform ephemeral resources keep secrets out of state and plan files. Here's how the ephemeral block's lifecycle works, and how to use one.
Terraform MCP grounds AI coding agents in real provider schemas and workspace data. See how it works, how to deploy it, and where it falls short.
Businesses weighing the benefits of open source need more than buzzwords: the real gains hinge on governance and maintenance, not the license alone.
IaC security covers scanning, policy-as-code, and blast-radius awareness. See which risks each layer stops, and which ones risk slipping through.
IaC scanning tools aren't one category. Compare 12 real options across four categories, with GitHub star counts verified live via the API.
A Terraform conditional seems simple until type mismatches, non-short-circuit logic, or a toggled resource breaks your plan. Here's what really happens.
Terraform feature flags with Flagsmith turn flag rollouts into pull requests: reviewable plans, auditable applies, and rollback with a single revert.
Infrastructure as code tools span provisioning, config management, scanning, and GitOps workflows. Compare 13 real options with verified GitHub stars.
Terraform split state file, explained: state mv, removed/import blocks, cross-state references, and why splitting isn't always the fix.
Learn what a terraform tfvars file is, see working examples, and find out where it falls short, plus how Stategraph fits around it.
A dependency graph decides Terraform's plan and apply order, but it breaks down once a state holds thousands of resources. See how to visualize yours.
Terraform Cloud alternatives don't fit into one category. See 8 real options, from managed SaaS to open source, compared honestly on features and total cost.
A Terraform security checklist covers scanning and secrets, but not blast radius or state locking. See what a full review actually requires.
Deploy a Terraform Redis cluster on AWS ElastiCache with genuine Multi-AZ failover, correct node group sizing, and snapshots that survive a destroy.
Terraform your Prometheus Alertmanager stack: monitoring, alerting, persistent storage, exporters, and Grafana dashboards, provisioned as code.
There is no single terraform dry run command. See exactly how plan, apply, destroy, and state mv each preview changes before anything runs.
Install the Terraform CLI, learn the core commands (init, plan, apply, and state), and see where a single global lock stops scaling for teams.
How to build a Terraform CI/CD pipeline. Here's what production pipelines actually need: locking, promotion, policy, and graph-aware execution.
Learn how Terraform state list works, how to filter results by module or resource type, and how to use it to audit and inventory your Terraform state.
Learn what a Terraform workspace is, the core commands, how to structure environments, and where workspace-based isolation breaks down at scale.
Learn what Terraform files are, how to structure and format them, and why clean file organization is necessary but not enough at scale.
Most Terraform best practices are workarounds for one defect, file-based state behind a global lock. The label launders a constraint into discipline.
Learn what Checkov is, how a Checkov Terraform scan works, how to wire it into GitHub Actions, and why passing a scan doesn't mean staying compliant.
Learn how Terraform architecture works, why state files and locks break at scale, and how graph-based state management fixes the root cause.
Learn how to deploy Nginx on AWS with Terraform. Provision an EC2 instance, configure security groups, add user data, and set up a load balancer with TLS.
A practical Terraform commands reference covering core workflow, state, workspace, and utility commands, with a focus on what each command does to your state.
Terraform isn't the only option. Compare the best Terraform alternatives, from OpenTofu to Stategraph, to find the right fit for your infrastructure stack.
Terraform state show inspects one resource in state, fast. Learn syntax, modules, sensitive output, remote state, and where it stops being useful.
Use terraform state rm to remove resources from Terraform state without deleting infrastructure, with examples, safe workflows, and mistakes to avoid.
Concurrency and parallelism are often confused but mean different things. Learn how they work, when to use each, and why it matters in Terraform.
Configuration drift silently breaks your infrastructure. Learn what causes it, how IaC prevents it, and which tools detect and fix it automatically.
Learn how to reduce AWS costs using Terraform. This guide covers right-sizing, lifecycle rules, tagging, and how to bring cost visibility into your IaC workflow.
Not sure what your Terraform infrastructure actually costs? This guide breaks down the real cost drivers and the best Terraform cost estimation tools available.
ClickOps slows teams down, introduces drift, and makes infrastructure hard to audit. Learn what ClickOps means in DevOps and how to move beyond it with IaC.
Learn how Terraform graph exposes Terraform dependencies, where the command gets hard to use, and how to make the graph easier to act on.
Learn what a monorepo is, how monorepo architecture works, why teams using IaC at scale are adopting it, and how Stategraph makes it manageable.
Build systems solved fast-and-correct twenty years ago. A walk through how Bazel's playbook - DAGs, hashing, sandboxes, caches - maps onto Terraform.
Stategraph 2.0 ships broader module coverage, a more robust HCL parser, and a faster core. Here is the engineering work behind the release.
Terraform remote state helps share output values across configurations, but broad state access can expose more data than each module needs.
Learn how the Terraform moved block lets you rename resources and reorganize modules safely, without destroying infrastructure or editing state by hand.
Terraform state was designed as a file. The next decade of infrastructure tooling treats it as a database, and the substrate is changing.
Use Claude Code as a Terraform agent that writes, validates, and iterates on HCL, and learn where the backend becomes the bottleneck once the loop works.
Learn what blast radius means in Terraform, why a large one is dangerous, and the practical steps and tools you can use to shrink it before changes go out.
Learn what Terraform concurrency means, how concurrency limits work, and how to safely manage concurrent Terraform runs in your infrastructure.
Learn how terragrunt run-all plans, applies, destroys, orders dependencies, and where orchestration starts to hit Terraform state limits.
A terralith keeps Terraform simple, and most of the pain blamed on it is really pain from file-based state. Here is what a terralith is and what actually fixes the symptoms.
Learn how Terraform parallelism works, what the default setting does, and how to tune it with the -parallelism flag for faster, safer apply runs.
Learn what Terraform backends are, how to configure local and remote options, and where the standard approach breaks down at scale.
Learn what `terraform fmt` changes, when `-recursive` matters, which flags to use, and how to enforce formatting in CI without noisy diffs.
Stategraph 1.0.0 shipped with full tfvars support, HCL parser improvements, and a testing overhaul. Here is the engineering work behind the milestone.
Learn how to use Terraform map variables with real examples, from basic declarations to for_each, lookup(), and map functions in HCL.
Learn what Terraform IaC is, how it works, the core concepts behind it, why teams adopt it for multi-cloud infrastructure, and how it compares with other IaC tools.
Learn what developer self-service is and the best practices for giving engineers the autonomy to provision infrastructure without compromising security.
A real benchmark on an 800 MB Terraform state file: a no-op that took nearly 3 hours versus 97 seconds. The architectural argument behind the result.
Why is Terraform so slow in plan and apply? Learn the real causes of Terraform slowness, the quick fixes that help, and the architectural fix.
Stategraph Velocity is fast plan and apply for Terraform or OpenTofu, built by replacing the flat state file with a database-backed dependency graph.
Learn how to automate Terraform deployments with CI/CD pipelines, the right tooling, and smarter state management for faster, more reliable infrastructure.
Parallel execution cuts test suite time and removes Terraform lock waiting. Learn safe patterns and how Stategraph runs independent changes in parallel.
Learn what OpenTofu is, how it compares to Terraform, installation methods, key features like state encryption, and how to migrate your infrastructure code.
Terraform already walks a DAG during apply. But in-run parallelism isn't the bottleneck. The graph is ephemeral, not infrastructure.
Terragrunt exists because Terraform can't handle cross-state dependencies. Multi-state transactions execute them atomically. No run-all needed.
Terraform vs. CloudFormation explained with real operational trade-offs, state, drift, portability, workflows, governance, and when to use both together.
Learn what Terraform stacks are, how components and deployments fit together, and see Terraform stacks examples for multi-environment infrastructure.
We're excited to announce that Terrateam has partnered with tech consultancy Devoteam to help developers and engineers ship infrastructure on the cloud.
AWS CDK vs. Terraform compared for real workflows, state, drift, testing, portability, and shipping changes safely at scale – plus a bit about CloudFormation.
How an academic paper about build systems helped us rethink Terraform automation and build a better execution engine.
Learn what infrastructure as code is, how IaC works in DevOps, and a practical plan to implement and test IaC with security guardrails and fewer surprises.
What has changed in Terraform's pricing, what it means for free Cloud customers, and which options you have if your infrastructure grows beyond a free tier.
Learn how to deploy Argo CD with Terraform using the Kubernetes provider. Set up application repositories, RBAC, and integrate with GitOps workflows.
Built a tool that computes the dependency cone of any Terraform resource and extracts a minimal subset file containing only what you need.
Learn how to deploy HashiCorp Vault on AWS using Terraform, configure high availability, and enable AWS KMS auto-unseal to maintain secure secret management.
How to deploy a serverless application with Terraform on AWS Lambda. Complete guide covering API Gateway, IAM roles, event triggers, and infrastructure as code.
How a bare metal server differs from virtual machines, cloud servers and traditional dedicated servers, and how to move from physical hardware to cloud.
Learn what Terraform drift is, its common causes, and how to master Terraform drift detection. Discover strategies to manage, fix, and prevent drift.
Build custom infrastructure workflows with the Terrateam REST API. Programmatic access to installations, repositories, the KV store, and more.
Compare Crossplane vs Terrateam and Terraform, understand control planes, state management and workflows so you can choose the right infrastructure as code stack.
Terragrunt solved Terraform's scaling problems by splitting state. Stategraph eliminates them by fixing the primitive itself.
Is Terraform open source? No, but there are alternatives. Here's our guide to finding the right solution for you and why Terraform isn't open source (but should be).
The differences between an application load balancer (ALB) and network load balancer (NLB), and how to provision and deploy load balancers with Terraform on AWS.
State fragmentation creates coordination problems Terraform can't see. The real issue isn't monolithic architecture—it's file-based storage.
How to create a AWS EKS clusters using Terraform, including worker nodes, IAM roles, and networking. Atep-by-step guide to Terraform EKS clusters.
We talked to one of Terrateam's contributors, Corey Regan, to learn about what motivates him to be an OSS contributor.
Learn how to deploy Grafana using Terraform on AWS EC2 and Kubernetes. Includes IAM roles, security groups, data sources, and monitoring setup.
Every layer of the stack is accelerating except infrastructure. Engineering leaders demand velocity. Terraform has the ecosystem but not the speed.
Two approaches to Terraform multi-environment management and ship a production-ready GitHub Actions workflow that targets the proper Terraform workspace safely.
Forcing a Terraform state unlock bypasses safety mechanisms that prevent concurrent modifications. Understand what's happening and what to do instead.
Learn how Terragrunt solves Terraform's scaling challenges. Manage complex multi-account AWS deployments, keep configurations DRY, and automate with GitHub Actions.
How to use Terraform to provision an AWS RDS PostgreSQL instance, set up automated backups, configure security groups, and apply performance optimizations.
Terraform's state lock error is a design choice that trades velocity for correctness, revealing fundamental coordination limitations.
Learn how to run tfsec and Checkov in GitHub Actions to block insecure Terraform changes, interpret findings, and customize rules for your org.
Learn how to store Terraform state files remotely on AWS using S3 and DynamoDB for locking. Prevent state conflicts and enable team collaboration with this guide.
Terraform state locking uses filesystem semantics for coordination. The result: global mutexes, deployment queues, and superlinear contention.
Atlantis was groundbreaking for its time, but it couldn't scale with modern Infrastructure-as-Code realities. Here's why we built Terrateam from scratch with determinism, parallelism, and values at its core.
Learn what Terratest is, how it differs from terraform test, and follow a hands-on Terratest tutorial with CI/CD integration and code examples.
Discover the most used Terraform providers in 2026, including AWS, Kubernetes, and Helm. Learn how to choose, version, and automate providers for enterprise GitOps.
Learn what Terraform state files are, where they're stored by default, and when to migrate from local to remote backends for team collaboration.
A comprehensive guide to Terraform state management: remote backends, state locking, security best practices, and CI/CD integration for enterprise teams.
Announcing Terrateam Stacks - orchestrate Terraform deployments with layered and nested stacks, explicit dependencies, and GitOps-native automation.
Deep dive into Terraform's dependency graph: how the DAG is constructed, how dependencies work, and how Terraform walks the graph with parallelism.
The Terraform Terralith isn't an anti-pattern. It's the natural shape of infrastructure. The real anti-pattern is accepting broken tooling.
How to automate drift detection with GitHub actions and be notified of changes to your infrastructure that could cause Terraform drift so you can prevent it.
Terraform state is a distributed systems problem masquerading as file storage. Stategraph models it as a graph with ACID transactions and subgraph isolation.
Discover why engineering teams are searching for an Atlantis alternative and how Terrateam OSS delivers missing features needed for modern Terraform automation.
Build GKE cluster with Terraform, automate deployments through GitHub Actions, and implement WIF to remove long-lived credentials from your CI/CD pipeline.
Steve Wade, the Pragmatic CNCF Guy, shares his unfiltered perspective on how infrastructure management will evolve from complex code to conversational AI by 2035.
How to provision a production-ready Amazon AWS EKS cluster using Terraform and GitHub Actions to automate deployments.
Matt Gowie, CEO of Masterpoint, shares his grounded perspective on why infrastructure as code isn't going away and why abstractions can't hide complexity.
Anton Babenko, creator of terraform-aws-modules, shares his bold vision for how infrastructure management will evolve beyond code by 2035.
A step-by-step guide on Terraform automation using GitHub Actions, focusing on building a CI/CD Pipeline for Terraform.
Integrate with your repo's CODEOWNERS file to ensure the right teams approve infrastructure changes
Control which Terrateam configuration settings must come from the default branch versus feature branches
Terrateam now works with GitLab self-managed or GitLab.com so you can run the same safe, automated Terraform/OpenTofu workflows you know from GitHub, without changing your Git provider.
Add manual approval gates for failed checks, enabling human judgment when automated validations flag issues
Learn how platform engineering and GitOps workflows with Terraform enable self-service infrastructure provisioning.
An in-depth analysis using Claude, ChatGPT, and Mistral
Learn how to structure Terraform modules for long-term maintainability, apply security best practices, and handle updates without breaking production. Covers versioning strategies, the moved block, migration patterns, and secure secret management.
Justin O'Connor, Director at KPMG and Founder at Onward Platforms, on why AI will create more code, not fewer engineers, and the critical balance between speed and expertise.
Kief Morris, Distinguished Engineer at Thoughtworks, shares insights on balancing AI's speed with infrastructure consistency, reliability, and governance.
Petar Nikov, founder of Cloud Solutions, shares why AI should accelerate, not replace, infra decisions, and how teams can build better guardrails around speed.
A hands-on guide to embedding security checks, secret scanning, and policy-as-code into your Terraform and GitOps workflows using tools like OPA, Conftest, and GitLeaks.
A technical guide for DevOps and platform teams looking to extend GitOps practices to Terraform-based infrastructure workflows, including CI/CD setup, policy enforcement, and tool comparisons.
A step-by-step guide to managing Heroku infrastructure with GitOps.
A practical guide to structuring Terraform workflows with GitOps, GitHub Actions, and short-lived credentials, without glue code or magic.
Terrateam has done a lot with a little.
OpenTofu has an opportunity to evolve into a true infrastructure delivery engine.
A deep comparison of Terraform Cloud and Stategraph Orchestration for infrastructure teams adopting GitOps workflows, including pricing, architecture, and use case fit.
A Terraform-first guide to secure GitOps secrets management using Infisical, OIDC, and Terrateam. Learn how to manage ephemeral secrets without storing them in Git.
Learn how to manage MySQL and PostgreSQL schema migrations using a GitOps workflow with Terrateam and Atlas.
Learn how to design, version, and automate Terraform modules for long-term maintainability. Covers module organization, lifecycle management, security patterns, and migration strategies for production infrastructure.
Compare the best CI/CD tools for Terraform. Learn what CI/CD tools are and which platform best supports GitOps workflows, policy enforcement, and drift detection.
Learn how to manage LaunchDarkly feature flags using Terraform in a secure GitOps workflow with Terrateam.
Discover OpenInfraQuote, an open-source CLI tool for easy infrastructure cost estimation.
Terraform automation tools shouldn't cost an arm and a leg.
IBM owns HashiCorp. What's next?
Terrateam's updated drift detection capabilities and how to use it in real-world workflows.
How to handle concurrency, drift, and secrets management when scaling Terraform pipelines.
This blog explains why combing GitFlow with Terraform can be a difficult strategy to adopt.
This blog explains how to manage Terraform projects using GitFlow workflow, a structured branching strategy that organizes feature development, releases, and hotfixes.
Learn Terraform best practices 2025 for modules, state, AWS, versioning, and infrastructure as code so your cloud deployments stay safe and predictable.
This blog outlines best practices for using Terraform in CI/CD pipelines, including state management, testing, secure secrets handling, etc., to ensure consistent and reliable deployments.
Learn practical approaches to organizing Terraform code in complex environments. Discover techniques for building reusable modules, managing configuration across environments, and scaling infrastructure code for production.
See how the merge function can allow you to combine and efficiently manage and use configuration maps in Terraform. Learn how to make practical use of infrastructure as code to streamline your infrastructure.
Customize Terraform workflows with Terrateam to add security checks, compliance, and automation directly in GitHub pull requests.
This blog explores Terraform caching, offering insights on optimizing initialization, minimizing redundant downloads, and setting up a local cache for centralized projects.
Customize Terraform workflows with Stategraph Orchestration to add security checks, compliance, and automation directly in GitHub pull requests. Build secure, efficient infrastructure workflows with ease.
This blog discusses why switching to OpenTofu offers a more secure, open-source alternative to Terraform, focusing on its transparent licensing and community-driven development. It also provides a step-by-step guide to migrating your infrastructure management from Terraform to OpenTofu.
When should you build or buy? A recent blog post about Terraflow gives insight into the benefits and drawbacks of building your own solution.
This blog will look at the top 10 tools for OpenTofu in 2025. These tools help you improve security, control costs, and keep your code clean and organized. This blog will explain what each tool does, how it can help you, and provide simple hands-on examples.
This blog explores Terraform Taint, highlighting its purpose, practical use cases, and how it compares to alternatives like terraform destroy. Backed by real-world scenarios and community discussions, this guide helps you understand when and why taint is the preferred choice for resource recreation.
How to automate and trigger OpenTofu GitHub Actions using Workflow Dispatch events.
Implement a zero-downtime Blue/Green Deployment on Kubernetes using Terraform, allowing smooth traffic switching and easy rollbacks. This guide covers setup, environment isolation, and automated updates for secure, scalable deployments.
A comparison of Pulumi vs. Terraform, highlighting their strengths and differences in approach, language flexibility, and use cases, so you can determine which IaC tool best suits you.
Learn how to use RBAC in Terraform to control access, with practical use cases and hands-on examples for environment-specific roles, resource permissions, and compliance-focused access control.
Learn how to simplify Terraform deployments and manage infrastructure dependencies with a layered architecture approach.
Learn about Open Policy Agent from first principles to when you're running an OPA policy against a Terraform plan and enforcing concrete security rules.
A guide to understanding Terraform's null resource, its use cases, and how to implement it for automation without creating infrastructure.
A guide on managing Terraform across multiple environments, focusing on how Terrateam simplifies infrastructure scaling and collaboration.
A detailed guide on how to migrate Terraform state between backends, including step-by-step instructions, real-world examples, and best practices.
System Initiative is more similar to what we have now than revolutionary.
Learn how to manage locked Terraform state file using the terraform force-unlock command. This guide covers common use cases, step-by-step examples, and best practices to ensure smooth Terraform operations.
Dynamically generate Terrateam configurations on the fly
OpenTofu's latest version 1.8.0 is out, featuring several exciting enhancements.
OpenTofu has recently released version 1.7.0, which has significant new features.
Resourcely is your paved road to secure, efficient, and easy-to-manage cloud infrastructure
Use of Boolean, Map,List, Data types
Learn how to integrate and manage Terrateam with GitHub Environments.
How to run Terraform locally on your workstation
Retrospective for March 2024: Getting better at sales
A complete guide on how to use Terraform import
A Comprehensive Guide to Dynamic Infrastructure Configuration
Retrospective for Feb 2024: Is self-hosted our niche?
Summarizing the upcoming state encryption feature in OpenTofu 1.7
Clearing up any and all confusion around Terraform providers
OpenTofu: An open-source alternative to HashiCorp's legacy Terraform
Everything you want to know about operations that Terrateam has executed is now at your fingertips.
Store plan files on private s3 buckets and more
The first OpenTofu release
The world's most popular IaC tool should not be maintained by a single vendor. OpenTF takes Terraform and makes puts it in the hands of a foundation, which is good for everyone.
Terrateam is pledging to the OpenTF manifesto
A constant is trying to experiment with pricing, we had to grow to understand who our competition is in order to understand our pricing.
The future of Terraform code is not writing Terraform.
Control how Terrateam acquires locks on directories.
Terraform, GitHub Actions, and Edge Cases.
Using Multiple AWS IAM Roles
Creating a Hello World! AWS Lambda Function with Terraform
Deploying Grafana with Terraform
Terraform Types Explained
How to import an AWS S3 bucket
import an AWS S3 bucket
Flying away from AWS
Announcing access controls for plan and apply operations
How Terrateam compares to standalone GitHub Actions for Terraform Automation
Terrateam provides precise control over what branches to perform operations.
Announcing apply requirements configuration, giving more control over when a change can be applied.
See your infrastructure costs with our new Infracost integration, on by default!
Terrateam doesn't take out locks on plan, allowing more development to happen in parallel.
Why we chose to launch Terrateam with Pull Requests as the only UI
How Terrateam executes Terraform
Use Nginx as a Terraform registry cache
Create GitHub resources with Terraform for easier management
Useful pre-commit hooks for your Terraform repository
What is safe for our users?
Migrating from Atlantis to GitHub Actions