#Security

18 articles

Cloud Computing

AWS IAM Policy Simulator with Terraform: Test Permissions Before Deploying

Use the AWS IAM Policy Simulator — also known as an IAM policy tester — to validate Terraform policies before apply and catch AccessDenied errors.

Jun 1, 20264 min read

DevOps

Terraform for OpenBSD VMs on AWS, Vultr, and Proxmox

Provision OpenBSD VMs with Terraform: AWS EC2 unofficial AMIs, Vultr official images, Proxmox install, and pf firewall bootstrap.

May 5, 20261 min read

OpenTofu

OpenTofu State Encryption: Protect Secrets at Rest

Configure OpenTofu's built-in state encryption to protect sensitive values at rest. AES-GCM with PBKDF2 or AWS KMS / GCP KMS / Azure Key Vault key providers.

May 4, 20263 min read

DevOps

Terraform for Digital Provenance: C2PA Content Signing

Provision digital provenance and C2PA content signing infrastructure with Terraform: certificate authorities, signing services, ledgers, and verification APIs.

May 4, 20262 min read

Terraform

Terraform with HashiCorp Vault - Secrets Management

Integrate Terraform with HashiCorp Vault for secrets management. Read secrets, dynamic credentials, AWS/database secret engines, and AppRole authentication.

May 1, 20262 min read

Terraform

Terraform on Ubuntu 26.04 LTS - sudo-rs, APT Rollback, and Hardened Base Images

Install and run Terraform on Ubuntu 26.04 LTS Resolute Raccoon. Covers sudo-rs as default, APT 3.2 rollback, Kernel 7.0, Wayland-only, ROCm, and building...

Apr 24, 20265 min read

DevOps

Terraform for AI Security: Guardrails, Model Access Control, and Threat Detection

Secure AI workloads with Terraform. Deploy Bedrock guardrails, model access IAM policies, prompt injection detection

Apr 12, 20264 min read

DevOps

Terraform for Confidential Computing: Deploy Nitro Enclaves and TEEs on AWS

Deploy confidential computing with Terraform on AWS. Provision Nitro Enclaves for data-in-use protection, configure KMS attestation policies

Apr 12, 20264 min read

DevOps

Terraform for Data Sovereignty: Geopatriation and Sovereign Cloud on AWS

Implement data sovereignty and geopatriation with Terraform on AWS. Enforce data residency with SCPs, deploy region-locked infrastructure

Apr 12, 20264 min read

DevOps

Terraform Ephemeral Resources Explained: Temporary Values for Secrets and Tokens

Learn Terraform ephemeral resources for handling secrets and tokens without storing them in state. Temporary values for passwords, API keys

Apr 12, 20263 min read

DevOps

Terraform for Post-Quantum Cryptography: Migrate TLS and KMS to PQC on AWS

Prepare for post-quantum cryptography with Terraform. Configure hybrid TLS policies, KMS key types, ACM certificates

Apr 12, 20264 min read

DevOps

Terraform for Preemptive Cybersecurity: Proactive Defense Infrastructure on AWS

Build preemptive cybersecurity infrastructure with Terraform. Deploy GuardDuty, Security Hub, Inspector, Config rules

Apr 12, 20263 min read