Detecting Terraform Vulnerabilities with Checkov: An Insecure vs Secure Comparison Demo

IaC security should be verified before you apply. Checkov lets you detect Terraform vulnerabilities through static analysis. Using five AWS resources (S3, Security Group, RDS, IAM, CloudTrail), this demo reproduces the journey from 37 FAILEDs to 111 PASSEDs in a public repository.

Granting Google Cloud Access by Team — Access Groups and Folders as Two Axes

"Folders or group addresses?" is a false choice. Folders scope permissions, groups identify principals, and the right design uses both axes together.

Pulumi and Terraform Migration Takes One Day - IaC Tool Choice Is Now a Reversible Decision

Choosing an IaC tool used to be a one-way door. Migrating hundreds of resource definitions, module structures, and state files would take weeks or months. But with AI coding assistants, Pulumi-to-Terraform and Terraform-to-Pulumi migrations now take a single day. This fundamentally changes how we should think about IaC tool selection.

Terraform REPL Feature Available with terraform console

Use `terraform console` as a REPL to interactively evaluate Terraform expressions like the `regex` function.

Resolved tfenv install Error with brew install grep

Fixing a `tfenv install` error caused by missing GNU Grep with `brew install grep` on macOS.

Introduction to Terraform Version Management Tool tfenv [macOS Edition]

Getting started with tfenv on macOS to manage multiple Terraform versions across projects.

Detecting Terraform Misconfigurations with Trivy: A Comparison Demo with Checkov

Following our Checkov demo, we scanned the same Terraform code with Trivy. Checkov found 37 issues; Trivy found 27. Where does the gap come from? We compare severity classification, IAM wildcard handling, and check ID systems using actual scan results.