OpenTofu
OpenTofu State Encryption: Protect Secrets at Rest
Configure OpenTofu's built-in state encryption to protect sensitive values at rest. AES-GCM with PBKDF2 or AWS KMS / GCP KMS / Azure Key Vault key providers.
3 min read
Security
8 articles
DevOps
Terraform for Digital Provenance: C2PA Content Signing on AWS
Provision digital provenance and C2PA content signing infrastructure with Terraform: certificate authorities, signing services, ledgers, and verification APIs.
2 min read
DevOps
Terraform for AI Security: Guardrails, Model Access Control, and Threat Detection
Secure AI workloads with Terraform. Deploy Bedrock guardrails, model access IAM policies, prompt injection detection
4 min read
DevOps
Terraform for Confidential Computing: Deploy Nitro Enclaves and TEEs on AWS
Deploy confidential computing with Terraform on AWS. Provision Nitro Enclaves for data-in-use protection, configure KMS attestation policies
4 min read
DevOps
Terraform for Data Sovereignty: Geopatriation and Sovereign Cloud on AWS
Implement data sovereignty and geopatriation with Terraform on AWS. Enforce data residency with SCPs, deploy region-locked infrastructure
4 min read
DevOps
Terraform Ephemeral Resources Explained: Temporary Values for Secrets and Tokens
Learn Terraform ephemeral resources for handling secrets and tokens without storing them in state. Temporary values for passwords, API keys
3 min read
DevOps
Terraform for Post-Quantum Cryptography: Migrate TLS and KMS to PQC on AWS
Prepare for post-quantum cryptography with Terraform. Configure hybrid TLS policies, KMS key types, ACM certificates
4 min read
DevOps
Terraform for Preemptive Cybersecurity: Proactive Defense Infrastructure on AWS
Build preemptive cybersecurity infrastructure with Terraform. Deploy GuardDuty, Security Hub, Inspector, Config rules
3 min read