· Martez Reed · Terraform
HashiCorp Terraform Checksum Verification
How do we verify that the Terraform binary we download is the same as the one HashiCorp produced?
Tag: Security
· Martez Reed · TerraformHashiCorp Terraform Code Signing
Signing software has become critically important given the recent supply chain attacks. How do we verify that the software we're downloading
· Martez Reed · VaultHashiCorp Vault Unique AppRole Identity Logging
HashiCorp Vault supports several authentication methods for human and non-human access. Several of the non-human authentication methods are
· Martez Reed · VaultIdentifying Active HashiCorp Vault Root Tokens
Revoking the root token on a production HashiCorp Vault deployment is one of the recommended best practices for securing an instance of Hash
· Martez Reed · VaultHashiCorp Vault Policy Metrics
I gave a talk for HashiCorp's HashiDays event earlier this year that centered around operational intelligence for HashiCorp Vault. The focus
· Martez Reed · HashiCorpVault Hardening Compliance using Chef InSpec
- · Martez Reed · HashiCorp
Vault Audit Logging
- · Martez Reed · DevOps
Terraform AWS S3 State Management Least Privilege
A very popular Terraform state management configuration is to utilize AWS S3 for state management and AWS DynamoDB for state locking. The pr