Configuration Drift in a Multi-Cloud World
Configuration drift is the gap between the infrastructure state declared in code and the state actually running in your environment. It occurs when resources are changed outside of your infrastructure as code (IaC) workflow, so the live system no longer matches its definition. In a single cloud, drift is usually straightforward to find and correct. […]
IaC Isn’t Dying. AI Makes it More Important
AI-generated infrastructure code is arriving faster than most organizations can absorb it. The organizations that invested in platform quality first are the ones pulling ahead. Every few years, someone declares that Infrastructure as Code is dead. The arguments tend to “sidecar” the hype cycle. First, complexity, then containers, then Kubernetes, then serverless. Now it’s AI’s […]
GitHub Actions Gets Serious About Self-Hosted Runner Versions
GitHub is resuming enforcement of minimum version requirements for GitHub Actions self-hosted runners — and this time, the deadlines are firm. After a rocky start that included multiple delays and a temporary pause earlier this year, GitHub has published a clear enforcement timeline for both GitHub Enterprise Cloud and GitHub Enterprise Cloud with Data Residency. […]
Latest OpenTofu Release Simplifies Configuration Updates
The latest update to the OpenTofu infrastructure-as-code (IaC) tool is making it simpler to update and refactor configurations without having to rework the entire codebase. Version 1.12.0 of OpenTofu has added a destroy = false lifecycle option that enables DevOps engineers to drop an object from state without issuing a destroy application programming interface (API) […]
AI Is Changing How We Write Infrastructure, But It’s Not Solving How We Control It
Over the past year, AI has fundamentally changed how software is written. Infrastructure code is no exception. Tasks that once required deep familiarity with tools, syntax, and workflows can now be handled through natural language. Engineers are no longer starting from a blank file. In many cases, reviewing and modifying code generated for them has […]
Red Hat Previews AI Agent Integration with Ansible Automation Platform
Red Hat today revealed it is extending the reach of its Ansible Automation Platform for IT operations to artificial intelligence (AI) agents, in addition to making it simpler to build AI agents using existing application development tools. Announced at the Red Hat Summit conference, version 2.7 of the Ansible Automation Platform adds a technology preview […]
Spacelift Intelligence Vibe-Codes Infrastructure
Whether the DevOps shops like it or not, they are feeling the pressure from AI. They’re expected to move more quickly, alongside their dev counterparts. The gruntwork that used to take weeks can be automated away, leaving time for fast prototyping, so the managers think. According to Google Cloud’s 2025 DORA State of AI-assisted Software […]
Policy as Code for Cost Control, Not Just Compliance
Policy as code can do more than enforce compliance. Learn how platform teams use guardrails, tagging and sizing policies to prevent cloud cost waste early.
Why the Next Wave of Infrastructure Automation Requires a Different Kind of Intelligence
Every decade or so, something fundamental shifts in how we think about infrastructure. Not an upgrade, a rethinking. Virtualization changed what infrastructure was. The cloud changed where it lived. Infrastructure as Code changed how it was defined. Each of those shifts felt incremental from the inside and transformative in hindsight. We’re at one of those […]
ControlMonkey Extends IaC Automation Reach to Restore Network Services
ControlMonkey has extended its platform for automating infrastructure-as-code (IaC) to add an ability to reprovision network services following a disruption in service. Company CEO Aharon Twizer said this extension to the Cloud Configuration Disaster Recovery platform, which the company launched last year, makes it possible to use Terraform code to programmatically reconfigure networking services among others […]
Infrastructure as Code, Security Blind Spots, and the Messy Reality of DevOps
I’ve spent most of my career in infrastructure and reliability engineering, from years as an SRE at Google to leading teams at Facebook and now building Spacelift. Along the way, I’ve watched entire paradigms rise and fall, seen technologies mature, and learned some hard lessons about where DevOps and security meet—and where they clash. The […]
ControlMonkey Adds AI Agents to Infrastructure Automation Platform
ControlMonkey today added artificial intelligence (AI) agents to its infrastructure automation platform that promise to make it simpler for almost any developer to securely provision infrastructure as code (IaC). Company CEO Aharon Twizer said this KoMo AI extension to the ControlMonkey platform will eliminate a skills gap that often conspires to slow the pace at […]
Pulumi Previews AI Agents Trained to Automate Infrastructure Management
Pulumi today revealed it is now making available in preview a set of artificial intelligence (AI) agents to its namesake infrastructure-as-code (IaC) platform that are capable of diagnosing issues and autonomously completing tasks when permitted. Company CEO Joe Duffy said Pulumi Neo adds a set of AI agents specifically trained to automate the management of […]
The Right Kind of AI for Infrastructure as Code
AI is everywhere in cloud security right now. Nearly every product claims to be “AI-powered,” and copilots and chatbots promise to help teams interpret issues faster. But for most platform teams, understanding the problem isn’t the hard part. The real challenge is resolution. Cloud environments change quickly, and the backlog of security findings grows just […]
AI-Driven Drift Detection in AWS: Terraform Meets Intelligence
Configuration drift, the divergence of deployed infrastructure from its source-defined configuration, has emerged as a critical vulnerability, particularly within the complex AWS environments I’ve managed, orchestrated by infrastructure as code (IaC) tools like Terraform.
Hybrid Infrastructure Is a Mess—But It Doesn’t Have to Be
If you’re a CIO who is managing hybrid infrastructure, you’re like the peace-keeper in a dysfunctional family. On one side, you’ve got the old-school on-prem team—practical, cost-conscious, maybe a little stubborn. On the other hand, the cloud team is fast-moving, quickly adopting the latest tools, and sometimes a little dismissive of “legacy” infrastructure. And just […]
The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece
If you work in DevOps, you’ve heard it a thousand times: “Do more with less.” More automation, more security, more reliability—but with the same (or fewer) people. Meanwhile, your development teams keep growing, pushing out new features at breakneck speed. Yet somehow, the infrastructure team is supposed to scale magically to keep up. Let’s be […]
The Basics of Infrastructure as Code: A Primer for DevOps
IaC changes the way IT operations and development teams collaborate to create, provision and manage infrastructure and applications. This short introduction explains its benefits.
Mind the Shift: Answering Common Questions About OpenTofu
A lead contributor to OpenTofu answers the (truly) frequently asked questions about the open source project.
What OpenTofu 1.7 Means for DevSecOps
With built-in end-to-end encryption, OpenTofu is a natural DevSecOps fit.
The Problems With Golden Templates That No One Wants to Talk About
Golden templates make it easier to get started with IaC, but they don’t effectively fit users’ needs. Let’s fix that.
IBM Confirms: It’s Buying HashiCorp
Everyone knew HashiCorp was attempting to find a buyer. Few suspected it would be IBM.
OpenTofu Denies Hashicorp’s Code-Stealing Accusations
The legal battle between the faux-open-source HashiCorp and the open source OpenTofu heats up.
Showing the 24 most recent articles. Additional archive pages are not yet available.