infrastructure as code

Super cool.

Alexa, can I double click on that? Like the Terraform thing that you said or I guess like any other IAC, right? So just to make sure I understand and maybe like correct me if I'm wrong here, but like you're essentially treating marketing infrastructure like it's like reviewable code, like versioned and you see like the biggest tensions between like growth needs, speed and platform needs, like anything like a feature flag, event pipeline, CDP connectors, like can you unpack that a bit more?

Yeah, I think my rough heuristic is that like, um, Claude and not just Claude, but let's say Claude, uh, is better at code than almost anything else.

Um, and so like, for example, we have Claude code, which it's very good at.

And,

you

know, IAC is how you make it a code problem.

And now what you have is like, I think the classic example is like, hey, we just integrated a new advertising partner.

So because we have talked about images and containers so much, this is something which is the code part of it, which is stored in the GitHub.

So this is called as infrastructure as code or IAC.

This is where developer will write.

This is the place where developer will fix.

This is hardcoded in a Docker compose, right? And here comes our vulnerability or misconfiguration where I've mounted entire docker.soc.

So because we know that this can cause issue and like not everyone is aware about that or like developers might miss this.

So as a security engineer, when you perform validation or perform a review, these are some things which you do like using IAC scanners or like when you look into the source code.

Like

10.

The N-O-O-N-I-F-I-C-A-T-I-O-N. Unlocking IAC Part 4.

Terraform GitHub.

10 April 2024.

You might have had Vagrant running locally, running the same thing.

IAC you have there, like Ansible or something to spin it up.

So it has a similar copy, but yeah, that's about it.

Do you think it's getting better or worse?

on all sides because there will be just more software yes the roles will change and some will change drastically and we'll have to figure out how that how that works

So when you say more AI and onboarding, are you talking about like a multi-agentic workflow? Like where maybe I have like an agent for just Terraform or just IAC in general.

And like that agent only handles that.

Or is it even more fractured than that? Like an agent that only handles like creation of objects or resources.

So let's say we've done discovery phase.

We've done read only.

It has the context of our entire IAC project.

It knows our deployment stack.

Make sure that you have basic settings like tags are required for each resources.

Make sure that IAC is required for each resources.

You cannot just click and open up a resource or anything.

Otherwise, you're going to see things like S3 bucket out in public and whatnot.

Top 5 Stories on the Hackernoon Homepage, 13.

The N-O-O-N-I-F-I-C-A-T-I-O-N. Unlocking IAC Part 4.

Terraform GitHub.

10 April 2024.

Trending stories on Hackernoon today.

370.

The N-O-O-N-I-F-I-C-A-T-I-O-N. Europe Pioneers I Governance with its IACT.

December 14, 2023.