Blog

Thoughts on Terraform state management, infrastructure parallelism, and building better developer tools.

RSS Feed
All Terraform 206 Infrastructure 142 GitHub 70 Security 55 DevOps 46 State Management 36 GitOps 34 OpenTofu 31 CI/CD 27 Automation 20 Policy 20 Infrastructure As Code 19 Open Source 18 AWS 16

The Guide to Maintaining Cloud Infrastructure Compliance

Maintaining cloud infrastructure compliance depends on what happens before the apply, not just what a scanner catches afterward. See what that requires in our guide.

Compliance Security Governance

How to run a Terraform audit: The Four-Layer Framework

A Terraform audit has to cover code, run history, state, and backend access, not just login logs. Here's the four-layer framework and the tools that help.

Terraform Security Compliance

What Is Terragrunt? How It Simplifies Terraform

What is Terragrunt used for? See how it wraps Terraform, kills config duplication, and orchestrates multi-module deployments in real pipelines.

Terragrunt Terraform Infrastructure as Code

Terragrunt Alternatives: 6 Tools Compared for 2026

Looking for Terragrunt alternatives? Six tools compared with honest pros and cons, plus how Stategraph works alongside Terragrunt or replaces it.

Terraform Terragrunt State Management

The Guide to Terraform Ephemeral Resources

Terraform ephemeral resources keep secrets out of state and plan files. Here's how the ephemeral block's lifecycle works, and how to use one.

Terraform Security State Management

Terraform MCP: What It Does for AI agents and What It Doesn't

Terraform MCP grounds AI coding agents in real provider schemas and workspace data. See how it works, how to deploy it, and where it falls short.

AI Terraform Infrastructure as Code

Terragrunt vs. Terraform Comparison and an Alternative

Terragrunt vs. Terraform compared and explained beyond the basics: benefits, trade-offs, a comparison table, and the way to get off Terragrunt with Stategraph.

Terragrunt Terraform Cloud State Management

The Real Benefits of Open Source for Enterprises and Startups

Businesses weighing the benefits of open source need more than buzzwords: the real gains hinge on governance and maintenance, not the license alone.

Open Source Terraform OpenTofu

IaC Security: What it Catches and What it Misses

IaC security covers scanning, policy-as-code, and blast-radius awareness. See which risks each layer stops, and which ones risk slipping through.

Security Infrastructure as Code Terraform

IaC scanning tools, sorted by what they actually do

IaC scanning tools aren't one category. Compare 12 real options across four categories, with GitHub star counts verified live via the API.

Security Infrastructure as Code Terraform

Terraform Conditional Logic, Beyond the Basic Ternary

A Terraform conditional seems simple until type mismatches, non-short-circuit logic, or a toggled resource breaks your plan. Here's what really happens.

Terraform Best Practices Infrastructure

Managing Terraform feature flags with Flagsmith

Terraform feature flags with Flagsmith turn flag rollouts into pull requests: reviewable plans, auditable applies, and rollback with a single revert.

Feature Flags Terraform Infrastructure as Code