6 posts
Terraform could reproduce my infrastructure, but it could not warn me when someone changed AWS manually. I built a CodeBuild job that runs Terraform plan, handles the drift exit code correctly, reads shared configuration from SSM, and sends an SNS email when the real infrastructure no longer matches the code.
How to expose an ECS Fargate app publicly using an Application Load Balancer, target groups, and Terraform. Includes subnet AZ requirements and security group locking.
One flat file works until it doesn't, here is how to fix that
Stop storing your state locally, here is the right way to do it on AWS
From invisible to observable: IAM, CloudWatch Agent, and SSM wired together with Terraform
I wanted to stop consuming Terraform modules and start writing them. The best way I know how to learn something is to build something real, break it, fix it, and understand why it works. So I sat down and built a full three tier AWS architecture from scratch, no copy paste, no AI, just me, the Terraform docs, and a lot of errors. Here is what I ended up with and what I learned along the way.