Tagged
On a 120-stack AWS Organization, CloudFormation StackSets for platform baseline plus CDK for app teams cut org-wide guardrail rollout from 6 weeks to 2 — with Application Composer for spikes and Blocks for greenfield TypeScript only at preview.
On a 40-account AWS Organization, platform baseline via CloudFormation StackSets (Hooks, GuardDuty enroll) plus app teams on Terraform/OpenTofu cut org-wide guardrail rollout from 9 weeks to 3 — without forcing one tool for everything.
June 2026 benchmark on the same read-only AWS scaffold: OpenTofu 1.12 plan median 5.2s vs Pulumi 3.248 preview median 10.6s—plus when to pick HCL over TypeScript on landing zones.
Most FinOps reviews happen weeks after infrastructure ships, when the bill arrives. CDK cost estimation flips that — synthesize the stack, walk the resource graph, hit the AWS Pricing API per resource, and post a monthly-cost diff on every pull request. The cost feedback loop drops from weeks to minutes; the failure modes (request volume, token usage, data transfer) are documented up front.
May 2026 guidance with a reproducible scaffold—9 artefact files, 0 Terraform-managed creates at plan baseline, anchored to official OpenTofu, HashiCorp, and Ansible project documentation.
July 2026 production walkthrough of Anton Babenko's Terraform Claude Skill on AWS — VPC, EKS, S3 + KMS, IAM OIDC — with measured scorecards, five gaps the skill still won't cover, and a reproducible eval harness.
Terraform to OpenTofu migration: compatibility, risks, tools, and production deployment patterns for AWS infrastructure.
When staging is green and prod fails, it's usually config drift — not the commit. July 2026 refresh: IaC parity, intentional size deltas, drift checks that catch SG and parameter-group surprises.
Detect AWS config drift with terraform plan + Config. July 2026 runbook: schedule, triage, prevent console writes.
June 30, 2026 added two major CloudFormation/CDK changes: pre-deployment validation on Create/Update and Express mode with up to 4x faster stack operations. This guide shows when to use each safely in production workflows.
Terraform is the multi-cloud default. CDK ships AWS features the day they GA. Language support, state management, multi-cloud flexibility, and the trade-off that determines which IaC tool fits your team — plus when running both is the right answer.
We use cookies and similar technologies to analyze site traffic, personalize content, and provide social media features. By clicking “Accept,” you consent to our use of cookies. You can adjust your preferences at any time.