👋 Interested in platform engineering for your organization, but not sure where to start? Get in touch, we're an expert team of platform engineers who deliver high-quality cloud platforms for startups and SMBs looking to scale. We enable your application engineers to focus on your product and in turn generate more value for your business.
Get In Touch ›" +callout: "👋 Interested in platform engineering for your organization, but not sure where to start? Get in touch, we're an expert team of platform engineers who deliver high-quality cloud platforms for startups and SMBs looking to scale. We enable your application engineers to focus on your product and in turn generate more value for your business.
Get In Touch ›" --- Come join us at Masterpoint as we build **awesome** cloud platforms for our clients! We’re searching for our next great platform engineer to help us architect, implement, and improve our cloud platform pattern that is built on AWS, Terraform, and Containers. Our vision for both employees and contractors is to provide an open and inclusive work environment, strive for a proper work / life balance, and contribute to the open source ecosystems that we rely so heavily on. diff --git a/content/blog/2023-08-10-understanding-the-terraform-check-block-feature.md b/content/blog/2023-08-10-understanding-the-terraform-check-block-feature.md index 999500b7..fd470cdc 100644 --- a/content/blog/2023-08-10-understanding-the-terraform-check-block-feature.md +++ b/content/blog/2023-08-10-understanding-the-terraform-check-block-feature.md @@ -8,7 +8,7 @@ date: 2023-08-10 # date_modified: 2025-xx-xx Be sure to use this if you've updated the post as this helps with SEO and index freshness description: "We dive into one of Terraform's most recent features to leverage infrastructure validation." image: /img/updates/tf-check-blog-post.png -callout: "👋 Interested in platform engineering for your organization, but not sure where to start? Get in touch, we're an expert team of platform engineers who deliver high-quality cloud platforms for startups and SMBs looking to scale. We enable your application engineers to focus on your product and in turn generate more value for your business.
Get In Touch ›" +callout: "👋 Interested in platform engineering for your organization, but not sure where to start? Get in touch, we're an expert team of platform engineers who deliver high-quality cloud platforms for startups and SMBs looking to scale. We enable your application engineers to focus on your product and in turn generate more value for your business.
Get In Touch ›" ---👋 Interested in platform engineering for your organization, but not sure where to start? Get in touch, we're an expert team of platform engineers who deliver high-quality cloud platforms for startups and SMBs looking to scale. We enable your application engineers to focus on your product and in turn generate more value for your business.
Get In Touch ›" +callout: "👋 Interested in platform engineering for your organization, but not sure where to start? Get in touch, we're an expert team of platform engineers who deliver high-quality cloud platforms for startups and SMBs looking to scale. We enable your application engineers to focus on your product and in turn generate more value for your business.
Get In Touch ›" ---👋 Interested in platform engineering for your organization👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch! +callout:
👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch! --- One of the main themes we’ve noticed is that platform teams often struggle when embracing the "as code" philosophy. Sure, they'll use OpenTofu or Terraform (collectively referred to from here on out as “TF”) to manage compute and other cloud resources, but they tend to stop short of applying the same principles to _everything_ in their operational domain. diff --git a/content/blog/2024-08-22-terralith-monolithic-terraform-architecture.md b/content/blog/2024-08-22-terralith-monolithic-terraform-architecture.md index 6803bb88..fd4ac804 100644 --- a/content/blog/2024-08-22-terralith-monolithic-terraform-architecture.md +++ b/content/blog/2024-08-22-terralith-monolithic-terraform-architecture.md @@ -9,7 +9,7 @@ date_modified: 2026-08-18 description: This article explores the challenges and pitfalls of Terralith, a monolithic Terraform architecture in Infrastructure as Code, and uncovers why a Terralith is not a good practice. image: /img/updates/terralith/terralith-article.png preview_image: /img/updates/terralith/terralith-preview-image.png # Use preview_image to prevent image overflow, best aspect ratios 270x355 or 600x700 -callout:
👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
---👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch! +callout:
👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch! --- # Introduction diff --git a/content/blog/2025-02-06-why-use-cloud-object-storage-terraform-remote-backend.md b/content/blog/2025-02-06-why-use-cloud-object-storage-terraform-remote-backend.md index e9f75244..e5fe87ab 100644 --- a/content/blog/2025-02-06-why-use-cloud-object-storage-terraform-remote-backend.md +++ b/content/blog/2025-02-06-why-use-cloud-object-storage-terraform-remote-backend.md @@ -8,7 +8,7 @@ date: 2025-02-06 date_modified: 2026-06-03 # Be sure to use this if you've updated the post as this helps with SEO and index freshness description: Discover why cloud object storage services are the gold standard for Terraform or OpenTofu’s remote state and backend, including the benefits and an example using AWS S3 with native state locking. image: /img/updates/cloud-object-storage-terraform-remote-backend/cloud-object-storage-for-terraform-remote-backend.webp -callout:
👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
---👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
---👋 If you're ready to take your infrastructure to the next leve Do you manage your infrastructure with Terraform or OpenTofu (collectively referred to from here on out as TF)? Have you noticed long `plan` and `apply` durations? Or are you concerned about the blast radius of changes? If so, you might be dealing with a **Terralith**. “Terralith” refers to a monolithic TF architecture where all your resources are managed within a single root module and state file. This setup leads to inefficiencies and increased risk when making changes. -In our previous article, [“What Is a Terralith?”](https://masterpoint.io/updates/terralith-monolithic-terraform-architecture/), we explored the challenges associated with Terraliths and why it’s beneficial to break them into smaller, manageable pieces. +In our previous article, [“What Is a Terralith?”](https://masterpoint.io/blog/terralith-monolithic-terraform-architecture/), we explored the challenges associated with Terraliths and why it’s beneficial to break them into smaller, manageable pieces. In this guide, we’ll walk you through the steps to break up a Terralith, helping you improve your infrastructure’s maintainability, and overall performance. @@ -121,7 +121,7 @@ You can do this by: Plan how you’ll manage multiple state files and keep them consistent. The organization of these files may differ based on your needs. We recommend storing your TF state in a reliable cloud storage solution. For example, on AWS, use an S3 bucket in the root or shared-services account as your backend, with DynamoDB for state locking. This solution offers versioning, encryption and enforces access control using IAM. A resource to help you set up state management on S3 is the open-source child module [cloudposse/terraform-aws-tfstate-backend](https://github.com/cloudposse/terraform-aws-tfstate-backend). -We explore this topic in detail in our blog post on [why cloud object storage is the best option for a Terraform remote state and backend](https://masterpoint.io/updates/why-use-cloud-object-storage-terraform-remote-backend/). +We explore this topic in detail in our blog post on [why cloud object storage is the best option for a Terraform remote state and backend](https://masterpoint.io/blog/why-use-cloud-object-storage-terraform-remote-backend/). ### Key Organizational and Team Questions diff --git a/content/blog/2025-04-01-importance-of-efficient-notifications-terraform-automation.md b/content/blog/2025-04-01-importance-of-efficient-notifications-terraform-automation.md index 20ea98e0..88b27a5b 100644 --- a/content/blog/2025-04-01-importance-of-efficient-notifications-terraform-automation.md +++ b/content/blog/2025-04-01-importance-of-efficient-notifications-terraform-automation.md @@ -8,7 +8,7 @@ date: 2025-04-01 date_modified: 2026-08-18 description: Explore how unnoticed Terraform & Infrastructure as Code (IaC) failures can lead to significant problems, and how efficient notification alerts can prevent issues from cascading into major operational disruptions. image: /img/updates/efficient-notifications-terraform-automation/terraform-automation-notifications.png -callout:
👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
---👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch! +callout:
👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch! --- ## Table of Contents diff --git a/content/blog/2025-05-21-tf-terminology-breakdown.md b/content/blog/2025-05-21-tf-terminology-breakdown.md index 04ae0e72..6ea54092 100644 --- a/content/blog/2025-05-21-tf-terminology-breakdown.md +++ b/content/blog/2025-05-21-tf-terminology-breakdown.md @@ -8,7 +8,7 @@ date: 2025-05-21 date_modified: 2026-08-18 description: List of Terraform and OpenTofu terms with definitions and explanations. image: /img/updates/tf-terminology-breakdown.png -callout:
👋 Got a term that you're still confused on in the TF or IaC space that you want us to include here? Get in touch and we'd be happy to add it!
+callout:👋 Got a term that you're still confused on in the TF or IaC space that you want us to include here? Get in touch and we'd be happy to add it!
--- # Table of Contents @@ -117,7 +117,7 @@ State management in Terraform comes in two primary flavors: local and remote bac **Remote backends**, on the other hand, store state in shared locations like S3 or Azure Storage, enabling multiple engineers to collaborate safely on the same configurations, while also providing better security controls. -We wrote an article on the best Backends to use here: [Why Use Cloud Object Storage for Terraform's Remote Backend & State](https://masterpoint.io/updates/why-use-cloud-object-storage-terraform-remote-backend/) +We wrote an article on the best Backends to use here: [Why Use Cloud Object Storage for Terraform's Remote Backend & State](https://masterpoint.io/blog/why-use-cloud-object-storage-terraform-remote-backend/) ## State Locking @@ -133,7 +133,7 @@ Without proper testing, infrastructure changes could potentially lead to costly ## Check Blocks -Terraform 1.5 introduced built-in validation through check blocks, which run during the planning phase. These blocks allow you to make assertions about your resource configurations before any changes are applied, providing an additional layer of confidence in your infrastructure changes. [We have an article that breaks down this topic that you can read here](https://masterpoint.io/updates/understanding-terraform-check/). +Terraform 1.5 introduced built-in validation through check blocks, which run during the planning phase. These blocks allow you to make assertions about your resource configurations before any changes are applied, providing an additional layer of confidence in your infrastructure changes. [We have an article that breaks down this topic that you can read here](https://masterpoint.io/blog/understanding-terraform-check/). ## Native TF Testing @@ -193,9 +193,9 @@ Platforms like Env0 and Scalr, which provide a more holistic, top-down managemen ## Terralith Pattern -The [Terralith pattern](https://masterpoint.io/updates/terralith-monolithic-terraform-architecture/) represents a specific approach to TF architecture that opts for a single state file for all infrastructure using a monolithic root module approach. While it's often seen as a natural starting point for new projects, teams should view it as technical debt that needs to be addressed in the future. The pattern's fundamental limitations - from state file locking issues to increased blast radius of changes - make it unsuitable for long-term use or any environment that needs to scale beyond basic infrastructure management. +The [Terralith pattern](https://masterpoint.io/blog/terralith-monolithic-terraform-architecture/) represents a specific approach to TF architecture that opts for a single state file for all infrastructure using a monolithic root module approach. While it's often seen as a natural starting point for new projects, teams should view it as technical debt that needs to be addressed in the future. The pattern's fundamental limitations - from state file locking issues to increased blast radius of changes - make it unsuitable for long-term use or any environment that needs to scale beyond basic infrastructure management. -Dealing with the Terralith problem and want to know more? [Check out our original post on this topic here](https://masterpoint.io/updates/terralith-monolithic-terraform-architecture/) and then [learn how to break up a Terralith in our follow-up article here](https://masterpoint.io/updates/steps-to-break-up-a-terralith/). +Dealing with the Terralith problem and want to know more? [Check out our original post on this topic here](https://masterpoint.io/blog/terralith-monolithic-terraform-architecture/) and then [learn how to break up a Terralith in our follow-up article here](https://masterpoint.io/blog/steps-to-break-up-a-terralith/). ## Demystifying HashiCorp Offerings: Terraform Cloud vs Terraform Enterprise vs HCP Terraform diff --git a/content/blog/2025-06-22-oss-iac.md b/content/blog/2025-06-22-oss-iac.md index 4eb4448e..c8024af6 100644 --- a/content/blog/2025-06-22-oss-iac.md +++ b/content/blog/2025-06-22-oss-iac.md @@ -8,7 +8,7 @@ date: 2025-06-22 # date_modified: 2025-xx-xx Be sure to use this if you've updated the post as this helps with SEO and index freshness description: "If your platform team is still writing every Terraform and OpenTofu resource by hand, you're falling behind. This post explains how open source Infrastructure as Code (IaC) enables modern platform engineering at scale — reducing effort, increasing security, and speeding up delivery." image: /img/updates/oss-iac/oss-iac.png -callout:👋 If you're ready to bring OSS best practices into your IaC codebase and workflows, we can help you get there—faster, safer, and with less overhead. Get in touch!
+callout:👋 If you're ready to bring OSS best practices into your IaC codebase and workflows, we can help you get there—faster, safer, and with less overhead. Get in touch!
---👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
--- ## Table of Contents diff --git a/content/blog/2025-09-17-fix-iam-trust-policy-errors-using-aws-sso-regional-arn.md b/content/blog/2025-09-17-fix-iam-trust-policy-errors-using-aws-sso-regional-arn.md index 47e9c8cb..6c69c0f9 100644 --- a/content/blog/2025-09-17-fix-iam-trust-policy-errors-using-aws-sso-regional-arn.md +++ b/content/blog/2025-09-17-fix-iam-trust-policy-errors-using-aws-sso-regional-arn.md @@ -8,7 +8,7 @@ date: 2025-09-17 date_modified: 2026-08-18 description: If your IAM trust policy isn't working with AWS IAM Identity Center SSO roles, it might be because us-east-1 does not have the region in the ARN while other regions do. image: /img/updates/aws-iam-identity-center-sso-trust-policies.png -callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
--- When working with [AWS IAM Identity Center](https://aws.amazon.com/iam/identity-center/) (formerly also known as AWS Single-Sign-on SSO), one of the most frustrating errors you can face is configuring trust policies that properly reference SSO role ARNs created by IAM Identity Center. diff --git a/content/blog/2025-10-06-standard-tf-files.md b/content/blog/2025-10-06-standard-tf-files.md index 7dacad51..9d685cae 100644 --- a/content/blog/2025-10-06-standard-tf-files.md +++ b/content/blog/2025-10-06-standard-tf-files.md @@ -7,7 +7,7 @@ slug: standard-tf-files date: 2025-10-06 description: "A comprehensive guide to the various files that make up a Terraform and OpenTofu project. Learn what belongs in main.tf, variables.tf, outputs.tf, and other essential files for maintainable Infrastructure as Code." image: /img/updates/standard-tf-files.png -callout:👋 If your team is struggling with inconsistent Terraform organization or looking to establish better practices for Infrastructure as Code, we'd love to help. To discuss how we can support your infrastructure goals with proven patterns and strategies, get in touch!
+callout:👋 If your team is struggling with inconsistent Terraform organization or looking to establish better practices for Infrastructure as Code, we'd love to help. To discuss how we can support your infrastructure goals with proven patterns and strategies, get in touch!
---👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
+callout:👋 If you're ready to take your infrastructure to the next level, we're here to help. We love to work together with engineering teams to help them build well-documented, scalable, automated IaC that make their jobs easier. Get in touch!
---