Infrastructure-as-Code

GuardDuty in a multi-account organization with Terraform

By admin / February 1, 2019

GitHub Code https://github.com/zghafari/guardduty What is GuardDuty? GuardDuty in a nutshell is a threat detection service that continuously monitors your AWS accounts and workloads for malicious or unauthorized behavior. It’s sort… Read More
- Infrastructure-as-Code
- Terraform
Terraform Enterprise vs Open-Source

By admin / December 17, 2018

I should start off by saying the primary features of Terraform are available in Open-Source. Enterprise provides you with a managed environment and dashboard that you do not have to… Read More
Creating AWS Lambdas through Terraform using archive_file

By admin / December 17, 2018

Preface In Terraform the aws_lambda_function has a parameter called source_code_hash. This parameter is a base64-encoded SHA256 hash of the package file specified with either filename or s3_key. The file itself is… Read More
Terraform AWS backend for remote state files with S3 and DynamoDB

By admin / December 14, 2018

Preface When using Terraform state files are normally generated locally in the directory where you run the scripts. This is fine for small scale deployments and testing as an individual… Read More
Terraform nested double for-loop

By admin / December 12, 2018

Preface Terraform’s HCL language does not provide us with a double for loop out of the box. However this is still possible albeit in a more complicated way using the… Read More
Terraform email SNS topic subscription (Bonus: Email List)

By admin / December 10, 2018

Preface Terraform does not support email as one of its protocols for SNS email subscriptions. You can read more about it here in their docs. These are unsupported because the… Read More