Insights

Posts tagged Engineering

Showing every note filed under this topic.

Engineering
Why we still write Terraform in 2026
Pulumi and CDKTF keep arriving with better tooling. Here's why Terraform still wins for most teams we work with.
João Matos6 min read
Engineering
Terraform state at scale: locking, remote backends, and shrinking blast radius
One giant state file is a single point of failure with a 40-minute plan. Here is how we split state without turning every deploy into a scavenger hunt.
João Matos7 min read
Engineering
Designing Terraform modules that survive three years
Most modules die not because the code is bad but because the interface was wrong on day one. Notes on inputs, versioning, and saying no.
João Matos6 min read
Engineering
Catching infrastructure drift before it catches you
Drift is not a tooling problem, it is a process problem. How we detect it on a schedule and decide what is worth correcting.
João Matos5 min read
Engineering
Guardrails, not gates: policy-as-code with OPA and Sentinel
Policy-as-code goes wrong when it becomes a bottleneck nobody can explain. How we write guardrails teams do not route around.
João Matos8 min read
Engineering
Bringing click-ops infrastructure into Terraform without breaking it
Importing real production infrastructure is mostly archaeology, not coding. Our process for adopting click-ops without an outage.
João Matos7 min read
Engineering
Testing Terraform: what is actually worth testing
Most Terraform tests assert that Terraform works, which it does. Where Terratest, plan checks, and native tests earn their keep.
João Matos6 min read
Engineering
Multi-account layout and where the state seams should go
The account boundary and the state boundary are not the same line. How we lay out accounts and decide where to cut state.
João Matos7 min read
Engineering
Handling secrets in Terraform without leaking them into state
Terraform state stores values in plaintext, including the secret you thought you protected. How we keep secrets out of state in practice.
João Matos6 min read

Back to all insights

Posts tagged Engineering

Why we still write Terraform in 2026

Terraform state at scale: locking, remote backends, and shrinking blast radius

Designing Terraform modules that survive three years

Catching infrastructure drift before it catches you

Guardrails, not gates: policy-as-code with OPA and Sentinel

Bringing click-ops infrastructure into Terraform without breaking it

Testing Terraform: what is actually worth testing

Multi-account layout and where the state seams should go

Handling secrets in Terraform without leaking them into state

Posts tagged Engineering

Why we still write Terraform in 2026

Terraform state at scale: locking, remote backends, and shrinking blast radius

Designing Terraform modules that survive three years

Catching infrastructure drift before it catches you

Guardrails, not gates: policy-as-code with OPA and Sentinel

Bringing click-ops infrastructure into Terraform without breaking it

Testing Terraform: what is actually worth testing

Multi-account layout and where the state seams should go

Handling secrets in Terraform without leaking them into state