Infrastructure as code
In short
Infrastructure as code (IaC) means defining servers, networks, cloud services and policies in version-controlled files that tools apply automatically, instead of configuring them by hand. It makes environments repeatable and reviewable, and buyers weigh the tool’s licence and ecosystem, how state is stored and secured, and how drift between code and reality is caught.
Written by Techarda editors · Updated · How we work
Latest stories
The newest Infrastructure as code stories from the last 90 days. Each one opens with our summary and a link to the original source.
Pulumi ESC now issues OIDC tokens for any service
A Pulumi ESC environment can now mint a short-lived OpenID Connect (OIDC) token for any service that accepts one. Every pipeline and agent that touches your infrastructure eventually needs credentials for services beyond your cloud: a package registry such as Cloudsmith or JFrog Artifactory, an AI platform such as Anthropic, or a workload access platform such as Aembit. The default historically…
How to patch application vulnerabilities without upgrading
Summary Most enterprise applications cannot be fixed simply by upgrading to the latest version of an impacted library.Lightwell delivers backported security fixes at your exact production library versions with cryptographically signed artifacts and SBOM included for compliance.Red Hat® Ansible® Automation Platform acts as the governed execution layer that turns Lightwell's validated patches into…
Scale your team's use of AWS IAM account access manager with Pulumi
In September 2026, AWS launched AWS IAM account access manager (AAM) , which lets administrators assign IAM roles to workforce users and groups in AWS IAM Identity Center. AAM combines IAM Identity Center’s single federation point and user awareness with the flexibility of IAM roles. Today, as part of our partner launch enablement, we’re pleased to share that you can manage AAM as…
How to Run an IaC Platform POC: What to Test in Two Weeks
Learn how to run a focused IaC platform POC in two weeks with a clear plan, evaluation checklist, and framework for comparing platforms.
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware
In July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor backed by the North Korean government that has targeted the cryptocurrency industry for years. This campaign also significantly overlaps with the previously reported KelpDAO incident, the analysis…
Concurrent change requests in Pulumi ESC
With ESC Approvals , you can propose, review, and apply environment changes with change requests. Until now, an environment could only have one open change request at a time. If a teammate’s change was waiting for review, others were blocked from opening change requests. Today, multiple people can open change requests on the same environment at the same time. A platform engineer can rotate…
Pulumi Google Cloud Provider Version 10.0.0
TL;DR: we are releasing a new major version of the Google Cloud provider. To migrate, ask Neo or your coding agent to run the Pulumi provider-upgrade skill ( how to use it ) or follow the v10 migration guide . We are happy to announce the next major version of the Pulumi Google Cloud provider. This release is based on the new v8 major version of terraform-provider-google (see also the upstream v8…
AWS Control Tower AFT now supports plan-only customization runs
AWS Control Tower Account Factory for Terraform (AFT) now supports plan-only customization runs, giving administrators the ability to preview Terraform changes before applying them across their managed accounts. AFT is an open-source Terraform module that automates account provisioning and customization in AWS Control Tower environments. Previously, invoking customizations always triggered a full…
Earlier in the last 90 days
- Executable UDFs are now generally available on ClickHouse CloudClickHouse · 6 Oct 2026
- Red Hat is named a Leader in IDC MarketScape: Worldwide Private and Hybrid Cloud Management with AutomationRed Hat · 5 Oct 2026
- Building zero trust networks with Red Hat AnsibleRed Hat · 5 Oct 2026
- Get Ship Done: Everything Harness Shipped in September 2026Harness · 2 Oct 2026
- Building Kubernetes PR Previews with Shared Pulumi ComponentsPulumi · 1 Oct 2026
- Automating Post-Quantum IPsec on Cisco Routers: IPsec Series, Part 12Cisco · 29 Sept 2026
- Terraform 1.16 completes Actions lifecycles and brings imports into child modulesHashiCorp · 28 Sept 2026
- Self-driving infrastructure with Pulumi and JevPulumi · 28 Sept 2026
- AI agents need continuity, not just contextPulumi · 26 Sept 2026
- Terraform provider for Google Cloud 8.0 now generally availableHashiCorp · 23 Sept 2026
- From incident insight to governed action with LogicMonitor Edwin AI and Red Hat Ansible Automation PlatformRed Hat · 23 Sept 2026
- Enforce custom rules in Datadog IaC Security scanningDatadog · 18 Sept 2026
- Simplify compliance with the native pre-written policy experience in HCP TerraformHashiCorp · 18 Sept 2026
- Multi-Cloud IaC Management: Taming Infrastructure ChaosHarness · 17 Sept 2026
- Simplifying Terraform for IBM Z with intent-driven workflowsHashiCorp · 16 Sept 2026
- Set Up Cloud OIDC From the Pulumi CLIPulumi · 11 Sept 2026
- The New Security Leader’s IaC Governance PlaybookSpacelift · 10 Sept 2026
- Spacelift Flows Is Live: Bring IaC Rigor to Day 2Spacelift · 9 Sept 2026
- Before You Renew Your Terraform Cloud ContractSpacelift · 4 Sept 2026
- Introducing HCP Terraform Metrics: operational visibility at scaleHashiCorp · 4 Sept 2026
- What Is Terraform Observability and How to Implement It?Spacelift · 31 Aug 2026
- Pulumi Kubernetes v4.34.0: CRDs as provider extensionsPulumi · 28 Aug 2026
- Stream HCP Vault Dedicated audit logs to Microsoft SentinelHashiCorp · 28 Aug 2026
- Pulumi Context API: query your infrastructure as a graphPulumi · 26 Aug 2026
- IaC Adoption Strategy: How to Implement Infrastructure as CodeSpacelift · 19 Aug 2026
- Best Kubernetes Infrastructure as Code Tools in 2026Pulumi · 14 Aug 2026
- Compatibility Testing Pulumi HCLPulumi · 14 Aug 2026
- Never Miss What Your Infrastructure Is Telling YouPulumi · 11 Aug 2026
- Automatic Logging for Faster, Secure DebuggingPulumi · 10 Aug 2026
- How to Run Terraform in Bitbucket PipelinesSpacelift · 8 Aug 2026
- Terraform and Kubernetes: A Practical Guide for 2026Pulumi · 7 Aug 2026
- HCP Terraform is the control plane for AI-driven infrastructureHashiCorp · 6 Aug 2026
- Emulating Terraform on Pulumi's EnginePulumi · 4 Aug 2026
- Bring Your Terraform Estate Into the Agentic EraPulumi · 4 Aug 2026
- A guided tour of Terraform state, hosted modules, and HCL in PulumiPulumi · 4 Aug 2026
- Migrate CloudFormation to Pulumi with Discovered StacksPulumi · 30 July 2026
- Discovered Stacks: One Place for All Your InfrastructurePulumi · 30 July 2026
- Terraform AzureRM provider 5.0 now generally availableHashiCorp · 29 July 2026
- How to Run AI Agents on Kubernetes with PulumiPulumi · 28 July 2026
- Enforce Access Token Expiry Policies in Pulumi CloudPulumi · 27 July 2026
What practitioners are discussing
Stories say what companies announced. These threads are where people who work with Infrastructure as code compare notes.
Nobody has started a thread on Infrastructure as code yet. Ask a question and practitioners who have worked with it can answer.
Companies in these stories
The active companies with the most Infrastructure as code stories in the last 90 days. It counts news coverage, not quality, market share or fit for your needs.
Related categories
Where Infrastructure as code sits among the categories Techarda covers. Each hub shows who is active, and each guide sets out how to evaluate vendors.
Terms to know
Plain definitions of terms that come up in Infrastructure as code stories, from the Techarda glossary.
Frequently asked questions
Declarative or imperative tools?
Declarative tools describe the end state you want and work out the changes. Imperative tools run steps in order. Most cloud provisioning uses declarative tools, while configuration management often mixes the two.
What is state, and why does it matter?
Many IaC tools keep a record of what they created so they can plan changes. That state can hold sensitive values, so store it centrally, lock it during changes and back it up.
What is drift?
Drift is when the real environment no longer matches the code, usually because someone changed it by hand. Regular drift detection and a rule that changes go through code keep the two in line.
Stories are filed under topics automatically from their headline and summary, so the odd one may sit in the wrong place. Spotted one, or a topic we should add? Email engage@techarda.com. All topics.