ArticCon 2022 (continued)
IaC aka declaratively aka config files
pros | cons |
---|---|
most cloud providers terraform modules or SDKs are well supported | higher barrier to entry |
forces automation | carries additional dependencies |
knowledge of what you want to accomplish is required prior to implementing a new feature | not that great for initial exploratory work |
can restrict this to service accounts | |
declarative / idempotent 1 | |
auditing is easy | |
change log comes for free 2 |