Keeping Secrets Out of Terraform State: Ephemeral Resources and Write-Only Arguments

Marking a value sensitive hides it on the console and still writes it to state. Ephemeral resources and write-only arguments let a secret pass through a run without being recorded. The same secret created both ways on Terraform 1.14 and OpenTofu 1.11, with every file searched for it afterwards.

Read more →

Azure Key Vault: A Solutions Architect’s Guide to Enterprise Secrets Management

In the world of cloud-native applications, secrets management has evolved from a necessary evil to a critical architectural concern. Azure Key Vault stands as Microsoft’s answer to centralized secrets, keys, and certificate management, providing a secure foundation for enterprise applications. Having implemented Key Vault across dozens of production environments, I’ve come to appreciate its role […]

Read more →