Securing Your Terraform Configuration | Best Practices for Managing Sensitive Data

preview_player
Показать описание
In this episode, Talia Nassi explains how to add and flag sensitive information in a Terraform configuration file.

Chapters:
0:00 Introduction
0:28 Sensitive Information Overview
2:08 Add a sensitive=true Flag
2:36 Replace the Token Value with the Variable
2:53 Conclusion

#AkamaiDeveloper #Terraform #infrastructureascode
Product: Akamai, Terraform, Infrastructure as Code; Talia Nassi
  1. Akamai Developer
  2. linode
  3. linux
  4. cloud computing
  5. linux server
  6. open source
Рекомендации по теме
Securing Your Terraform 0:03:22

Securing Your Terraform Configuration | Best Practices for Managing Sensitive Data

Shifting Terraform Configuration 0:29:15

Shifting Terraform Configuration Security Left

Use Terraform? You 0:10:09

Use Terraform? You NEED this for security!

8 Terraform Best 0:08:57

8 Terraform Best Practices that will improve your TF workflow immediately

Secure Your Terraform 0:02:42

Secure Your Terraform Code: 5 Steps to Bulletproof IaC Security!

Unleash the Power 0:06:37

Unleash the Power of Terraform - 5 Must Know Features

Identifying Misconfigurations in 0:14:09

Identifying Misconfigurations in your Terraform

Three methods for 0:21:44

Three methods for securing state files in Terraform

Deploy a Slack 0:21:19

Deploy a Slack Chatbot with Terraform, GitHub Actions, and Azure OIDC | Step-by-Step Guide

How to Manage 0:15:54

How to Manage Secrets in Terraform?

How Secure are 0:30:57

How Secure are Your Sensitive Values in Terraform? Common Pitfalls of Scale Factory's Clients

Secure and Manage 0:20:47

Secure and Manage Your Terraform State with AWS S3 Backend for Beginners | Step-by-Step Guide

[Learn Lab] Test 0:45:06

[Learn Lab] Test your Terraform configuration

Secure your Cloud 0:25:01

Secure your Cloud with Terraform Foundational Policy Library

Solutions Engineering Hangout: 0:29:13

Solutions Engineering Hangout: Security in Depth with Terraform and Vault

10 Terraform Best 0:10:31

10 Terraform Best Practices in 10 minutes

How to Connect 0:13:22

How to Connect AWS with Terraform | Set Credentials & Configure

Terraform Earth - 0:39:12

Terraform Earth - Secure Infrastructure for Developers

Validate Your Terraform 0:00:52

Validate Your Terraform Configuration Like an Expert | The Crucial Role of Terraform Validate

Using Terraform's Sensitive 0:00:57

Using Terraform's Sensitive Variables to Maintain Security in Your DevOps Workflow

Terraform Dynamic Provider 0:11:52

Terraform Dynamic Provider Credentials | A secure authentication with your cloud provider

Complete Terraform Course 2:38:04

Complete Terraform Course - From BEGINNER to PRO! (Learn Infrastructure as Code)

Vault Configuration as 0:25:25

Vault Configuration as Code via Terraform Stories From the Trenches

Automating the CIS 0:22:15

Automating the CIS Foundations Benchmark for AWS with Terraform

Комментарии
Автор

But isn’t the value still visible, can’t you use something like secret manager ? I don’t get the clue in using tfvars, if the key is still hardcoded ?

leonschmidt
Автор

I mean, it's great to not hard code and use variables, but you haven't secured that token in any way.

I think a lot of people (myself included) wanted to understand how to secure tfstate, as it is produced in plain text, which is a big no/no for secrets.

TiffanyTwisted