#Terraform security

DevOps & Platform Eng

HCP Terraform's New IP Allowlists: Finally Locking Down IaC from the Cloud

HashiCorp just dropped IP allowlists for HCP Terraform, letting orgs whitelist trusted IPs for tokens. It's a no-nonsense fix for remote work paranoia—but is it enough?

DevOps & Platform Eng

AWS Lets Terraform Borrow the Keys — Temporarily — and It Changes Everything for IaC Security

Seventy percent of security incidents in cloud stem from leaked credentials — a stat that hits home for Terraform users juggling AWS keys. Now, with AWS permission delegation generally available in HCP Terraform, those days might finally be numbered.