Terraform
HashiCorp Terraform core releases and blog.
- HashiCorp Blog blogsecurityinfraengineer ·
IBM Vault Enterprise 2.0 adds LDAP secrets management
IBM Vault Enterprise 2.0 introduces centralized rotation for LDAP static roles, enabling self-managed flows and automated lifecycle management. This feature simplifies secrets management by consolidating control and automating updates for LDAP-based access.
feature - Terraform AWS Provider Releases terraforminfraawsengineer ·
Terraform AWS Provider v6.44.0: New resources, DynamoDB index no longer experimental
Terraform AWS Provider version 6.44.0 introduces several new resources, including data sources for AWS Glue Catalog and list resources for various services. The `aws_dynamodb_global_secondary_index` resource is now out of experimental status and subject to backwards compatibility guarantees. These updates provide Terraform users with expanded capabilities for managing AWS infrastructure.
feature patch - Terraform Google Provider Releases terraforminfragcpgapreviewengineer ·
Terraform Google Provider v7.31.0: New resources and compute improvements
This release of the Terraform Google Provider introduces new data sources and resources for services like Artifact Registry, Contact Center AI, and Firebase App Check. Several compute-related resources have been migrated to use direct HTTP calls, enhancing efficiency. Additionally, various improvements and bug fixes are included across services such as Cloud Deploy, Dataplex, and BigQuery, impacting users managing GCP infrastructure via Terraform.
feature patch - HashiCorp Blog bloginfrapreviewengineer ·
HCP Terraform with Infragraph enters public preview
HCP Terraform powered by Infragraph is now in public preview, aiming to address data silos in hybrid and multi-cloud environments. This new capability provides a unified view to optimize and secure infrastructure configurations, benefiting teams managing complex cloud estates.
feature - HashiCorp Blog blogsecurityinfraengineer ·
HashiCorp Vault Secrets Operator automates Kubernetes secret management
HashiCorp Vault Secrets Operator (VSO) enhances secret delivery for Kubernetes and Red Hat OpenShift environments. This automation simplifies secure secret lifecycle management for enterprises operating at scale.
feature - Terraform AzureRM Provider Releases terraforminfraazureengineer ·
Terraform Azure Provider v4.71.0 Adds CDN Security Policy Data Source
Version 4.71.0 of the AzureTerraform provider introduces a new data source for CDN Frontdoor security policies and includes enhancements to various services like Event Hubs and Kubernetes clusters. It also addresses several bug fixes, including issues with MSSQL managed databases and network security rules, impacting users managing Azure infrastructure via Terraform.
feature patch - HashiCorp Blog blogaiinfraengineer ·
Vault Enterprise Adds SPIFFE Auth for AI Agents
Vault Enterprise now supports SPIFFE authentication for non-human identities, including AI agents. This integration simplifies securing and extending authentication for these dynamic workloads, benefiting teams managing AI agent security.
feature - HashiCorp Blog bloginfraengineer ·
Terraform Registry adds Partner Premier tier
HashiCorp has launched a new "Partner Premier" status within the Terraform Registry. This introduces a new tier for partners, aiming to enhance discoverability and trust for Terraform providers.
announcement feature - HashiCorp Blog blogsecurityinfraengineer ·
IBM Vault Enterprise 2.0 Automates Local Account Password Rotation
IBM Vault Enterprise 2.0 now automates local account password rotation using SSH. This feature replaces shared passwords with unique, audited credentials, significantly reducing security risks for organizations.
feature - Terraform AWS Provider Releases terraforminfraawsdeprecationengineer ·
Terraform AWS Provider v6.43.0: New resources and bug fixes
This release of the Terraform AWS Provider introduces several new data sources and resources, including those for AWS Security Hub and EC2 Network Insights. Enhancements focus on resource identity support across various services and an update for AWS Bedrock Agent Core. A notable bug fix addresses plan-time errors with CloudWatch metric alarms, and improvements were made to ECS Express Gateway Service error handling. This update impacts users managing AWS infrastructure via Terraform.
feature patch - HashiCorp Blog bloginfraawsengineer ·
HashiCorp Vault and Boundary for Scalable SSH Access
HashiCorp has updated its approach to building scalable, role-based SSH access using SSH certificates, Vault, and Boundary. This solution is designed for modern hybrid and multi-cloud environments, enhancing security and manageability for accessing infrastructure.
feature - Terraform Core Releases terraforminfraawsdeprecationengineer ·
Terraform 1.15.0 adds Windows ARM64 builds and variable support in module sources
Terraform v1.15.0 introduces builds for Windows ARM64 and allows variables and locals in module source and version attributes. It also adds a `deprecated` attribute for variables and outputs, enabling better lifecycle management for configurations. These changes benefit engineers managing diverse environments and complex module dependencies by providing more flexibility and clearer deprecation signals.
feature patch deprecation - Terraform Databricks Provider Releases terraformdatadatabricksengineer ·
Databricks Terraform Provider Adds Disaster Recovery and Supervisor Agent Resources
Databricks Terraform Provider v1.114.0 introduces new resources for managing disaster recovery failover groups, stable URLs, and supervisor agents, alongside support for adopting pre-existing PostgreSQL branch and endpoint resources. This release enhances infrastructure management capabilities for Databricks users, impacting engineers and architects responsible for data platform deployment and resilience.
feature patch - Terraform Google Provider Releases terraforminfragcpengineer ·
Terraform Provider for Google v7.30.0
This release of the Terraform Google Provider introduces new resources for Data Lineage, Artifact Registry, Document AI, and Firebase Remote Config. It also includes improvements such as support for regional endpoints, new disk types for Workbench instances, and enhanced BigQuery connection configurations. A breaking change in the Apigee provider requires the `name` field for `google_apigee_env_keystore`.
breaking feature patch - HashiCorp Blog blogsecurityinfraengineer ·
HashiCorp Vault Radar: Turn Secret Detection into Measurable Risk Reduction
HashiCorp Vault Radar helps teams transition from discovering secret sprawl to actively reducing risk. This new capability enables coordinated action for remediation, making secret management more effective.
feature - Terraform AzureRM Provider Releases terraforminfraazurepreviewengineer ·
Terraform Provider AzureRM v4.70.0 Adds Storage Mover Resources
Terraform Provider AzureRM v4.70.0 introduces new resources for managing Azure Storage Movers, including agents and endpoints. Enhancements focus on API version updates for Synapse and Cosmos DB, improved SDK integrations, and added properties for various services like backup policies, bots, dashboards, and NAT gateways. This release also includes fixes for storage account SAS permissions and container app environment stability, impacting engineers managing Azure infrastructure via Terraform.
feature patch - HashiCorp Blog blogsecurityinfraengineer ·
IBM Vault integrates public certificate authority orchestration
IBM Vault now offers unified public CA orchestration, allowing automation of public certificate workflows and PKI lifecycle unification. This integration aims to enhance the security of internal workflows by streamlining certificate management.
feature - Terraform AWS Provider Releases terraforminfraawsengineer ·
Terraform AWS Provider v6.42.0 Adds New Resources and Features, Includes Breaking Change
Terraform AWS Provider v6.42.0 introduces multiple new data sources and resources, including support for EC2 service links, API Gateway v2, and various AWS services. A breaking change in the `aws_mq_configuration` resource now correctly deletes configurations, requiring the `mq:DeleteConfiguration` IAM permission. This release impacts engineers managing AWS infrastructure via Terraform who need to be aware of the breaking change and can leverage the new resources for expanded capabilities.
breaking feature patch - Terraform Google Provider Releases terraforminfragcppreviewengineer ·
Terraform Google Provider v7.29.0 Adds New Resources and Improvements
Terraform Google Provider v7.29.0 introduces several new resources, including those for Firebase Admin SDK, Chronicle, and Dataform, alongside enhancements to existing resources like AlloyDB and Cloud Deploy. These updates allow for more comprehensive management of Google Cloud infrastructure through Terraform, benefiting engineers and architects working with these services. The release also includes various bug fixes across multiple GCP services.
feature patch - Terraform AzureRM Provider Releases terraforminfraazureengineer ·
Terraform Provider AzureRM v4.69.0 adds new resources and enhancements
This release of the Terraform AzureRM provider introduces several new resources including Traffic Manager Profile, Web PubSub, Automation Runtime Environment Package, and Container App Environment Managed Certificate. Enhancements include updated dependencies, exported properties for Kubernetes node pools and storage shares, and expanded permissions for storage account SAS. Bug fixes address parsing inconsistencies for virtual machine disks and properties for private DNS resolver inbound endpoints.
feature patch