Gotchas Using Terraform in a Secure Delivery Pipeline

Explore the intricacies of integrating Terraform into a secure continuous delivery pipeline in this comprehensive conference talk. Delve into common challenges developers face when implementing infrastructure as code, including security, locking, state conflicts, rollbacks, and versioning. Learn practical solutions for managing AWS infrastructure securely using Terraform and addressing issues that arise when working with Terraform in a team environment. Gain insights from real-world implementations and access code examples released on GitHub. Discover design patterns, resource modules, and infrastructure modules to optimize your Terraform usage. Understand the nuances of access control principles, secrets management, and CI/CD pipeline integration. By the end of this talk, acquire the knowledge to implement Terraform more effectively in your delivery pipeline, avoiding common pitfalls and leveraging best practices gleaned from 2.5 years of practical experience.

Introduction
About Anton
Agenda
Multitier infrastructure
What is Terraform
Running Terraform
CICD pipeline
Typical CICD pipeline
How to get started
Documentation
CI tools
Atlantis
Russia Corp
PreSummary
Terraform options
Shared directory
Secret
Password
Access Control Principles
Access Key and Roles
Design Patterns
Resource Modules
Infrastructure Modules
Composition
Pipeline
Circle CI
Modules
Tools
Infrastructure
Telephone problems
What is refactoring
Terraform upgrade
Terraform Atlantis
Terraform Pipeline
Terraform Circle CI
Summary
Rollback
Testing
Questions