terraform – Thenewtonlab

On My Silver Anniversary In Consulting

By Dan NewtonPosted on January 16, 2025Posted in aws, terraformNo Comments

January 2025 marks a couple of milestones. It will be my 3rd year at Slalom and is my 25th year in technology consulting. Wow time flies…and so I thought I would share some reflections on this journey I’ve been (and am still) on. For those who have known me long, know that my path to […]

My answer for complex aws filters with terraform

By Dan NewtonPosted on August 5, 2023Posted in aws, terraformNo Comments

Hello again friend. It’s the heat of the summer and I’ve been on a rather long engagement helping a client automate the build of EKS servers. One item I was keen to automate was the target subnet where the cluster gets installed and where to place the node group(s). So I turned to the aws_subnets […]

An easier method to deal with AWS Security Groups via Terraform

By Dan NewtonPosted on April 25, 2023Posted in aws, terraformNo Comments

As I continue my Terraform journey, I am always trying to find better ways to deal with the complexities of the code and the resulting resources built from the code. Security Groups are no execption. I did some web searching and found some code to parse a CSV and create a security group rule set. […]

Configmap and the AWS EKS Terraform Module

By Dan NewtonPosted on November 12, 2022Posted in aws, Kubernetes, terraformNo Comments

I’m currently on a cool project where we are automating the deployment of EKS clusters with Terraform. The TFE server is configured with an IAM user, that TF user will automatically be added to the aws-auth section of the configmap. We have EKS module code to add our SSO group’s rolearn to the configmap. The […]

My takeways from Terraform code and Gateway Load Balancer

By Dan NewtonPosted on May 14, 2022Posted in aws, Security, terraformTagged AWS, PaloAlto, TerraformNo Comments

My first bit of code for my new employer was help to setup a “security VPC” that hosts a pair of Palo-Alto firewalls to inspect traffic from other AWS accounts (AKA “hub and spoke”). This work was based (loosely) on repos found here and here…these repos build a similar environment but within a single AWS […]

How I removed credentials from my terraform code.

By Dan NewtonPosted on April 27, 2022Posted in Security, terraformTagged AWS, TerraformNo Comments

I had been using credential files in my terraform projects. Recently I switch to use AWS SSO and providing the profile name in the code. At runtime (plan, apply, etc.) terraform will use the token from the given profile. If AWS returns expired, the command will stop with authentication errors. Simply authenticate by cli via […]

Don’t add account id to your Terraform code

By Dan NewtonPosted on April 27, 2022Posted in aws, terraformTagged AWS, TerraformNo Comments

I discovered a handy trick to get the account id of the given profile/account. The key is to use a new data source object and pass it the provider. See the code below. So no need to ever put account ids in terraform code again? I’m good with that. Happy building, D