<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Terraform on Just Tinkering</title><link>https://justtinkering.nl/tags/terraform/</link><description>Recent content in Terraform on Just Tinkering</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Sebastiaan Brozius</copyright><lastBuildDate>Mon, 29 Dec 2025 18:00:00 +0100</lastBuildDate><atom:link href="https://justtinkering.nl/tags/terraform/index.xml" rel="self" type="application/rss+xml"/><item><title>Consistently deploying Lambda functions and layers using Terraform</title><link>https://justtinkering.nl/2025/12/29/consistently-deploying-lambda-functions-and-layers-using-terraform/</link><pubDate>Mon, 29 Dec 2025 18:00:00 +0100</pubDate><guid>https://justtinkering.nl/2025/12/29/consistently-deploying-lambda-functions-and-layers-using-terraform/</guid><description>&lt;p&gt;&lt;em&gt;The code that accompanies this blogpost can be found &lt;a href="https://github.com/justtinkering/blogpost-deploy-lambda-with-terraform" target="_blank" rel="noreferrer"&gt;here&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;Deploying Lambda functions to AWS using Terraform can be quite a struggle, especially when deploying from multiple environments (which only happens in dev and test environments, am I right?).&lt;/p&gt;</description></item><item><title>Setting up AWS IoT Core using Terraform</title><link>https://justtinkering.nl/2024/12/29/setting-up-aws-iot-core-using-terraform/</link><pubDate>Sun, 29 Dec 2024 00:00:00 +0100</pubDate><guid>https://justtinkering.nl/2024/12/29/setting-up-aws-iot-core-using-terraform/</guid><description>&lt;p&gt;&lt;em&gt;The code that accompanies this blogpost can be found &lt;a href="https://github.com/justtinkering/blogpost-iot-core" target="_blank" rel="noreferrer"&gt;here&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;I&amp;rsquo;ve been tinkering with AWS IoT Core this year, and wanted to put at least some of what I&amp;rsquo;ve found and done into a blog, so here it is.&lt;/p&gt;</description></item><item><title>Creating an AMI with Image Builder</title><link>https://justtinkering.nl/2024/11/06/creating-an-ami-with-image-builder/</link><pubDate>Wed, 06 Nov 2024 00:00:00 +0100</pubDate><guid>https://justtinkering.nl/2024/11/06/creating-an-ami-with-image-builder/</guid><description>&lt;p&gt;&lt;em&gt;The code that accompanies this blogpost can be found &lt;a href="https://github.com/justtinkering/blogpost-imagebuilder" target="_blank" rel="noreferrer"&gt;here&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;

 



&lt;div
 
 class="flex px-4 py-3 rounded-md shadow bg-primary-100 dark:bg-primary-900"
 
 &gt;
 &lt;span
 
 class="text-primary-400 pe-3 flex items-center"
 
 &gt;
 &lt;span class="relative block icon"&gt;&lt;svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"&gt;&lt;path fill="currentColor" d="M506.3 417l-213.3-364c-16.33-28-57.54-28-73.98 0l-213.2 364C-10.59 444.9 9.849 480 42.74 480h426.6C502.1 480 522.6 445 506.3 417zM232 168c0-13.25 10.75-24 24-24S280 154.8 280 168v128c0 13.25-10.75 24-23.1 24S232 309.3 232 296V168zM256 416c-17.36 0-31.44-14.08-31.44-31.44c0-17.36 14.07-31.44 31.44-31.44s31.44 14.08 31.44 31.44C287.4 401.9 273.4 416 256 416z"/&gt;&lt;/svg&gt;
&lt;/span&gt;
 &lt;/span&gt;

 &lt;span
 
 class="dark:text-neutral-300"
 
 &gt;&lt;strong&gt;Update 2024-12-07:&lt;/strong&gt; In the examples I use Amazon Linux 2023, which cannot be exported to other formats. I&amp;rsquo;ve changed the code in the repository to use an Ubuntu 24.04 base image, which &lt;em&gt;can&lt;/em&gt; be exported.&lt;/span&gt;
&lt;/div&gt;

&lt;p&gt;I&amp;rsquo;ve been working with AWS Image Builder a lot more over the last couple of months, while replacing a &lt;code&gt;Packer&lt;/code&gt; setup that was run on a Windows laptop, with Image Builder.&lt;/p&gt;</description></item><item><title>Automating patching with AWS Systems Manager</title><link>https://justtinkering.nl/2023/11/13/automating-patching-with-aws-systems-manager/</link><pubDate>Mon, 13 Nov 2023 00:00:00 +0000</pubDate><guid>https://justtinkering.nl/2023/11/13/automating-patching-with-aws-systems-manager/</guid><description>&lt;p&gt;&lt;em&gt;The code that accompanies this blogpost can be found &lt;a href="https://github.com/justtinkering/blogpost-ssm-automated-patching" target="_blank" rel="noreferrer"&gt;here&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;Recently I&amp;rsquo;ve been looking into patching Windows servers that have dependencies between them, using AWS Systems Manager.&lt;/p&gt;
&lt;p&gt;The use-case was an application that exists of web servers, middleware servers and a database server.&lt;/p&gt;</description></item><item><title>Lessons learned from migrating 42 servers to AWS</title><link>https://justtinkering.nl/2023/06/05/lessons-learned-from-migrating-42-servers-to-aws/</link><pubDate>Mon, 05 Jun 2023 00:00:00 +0000</pubDate><guid>https://justtinkering.nl/2023/06/05/lessons-learned-from-migrating-42-servers-to-aws/</guid><description>&lt;p&gt;Earlier this year I&amp;rsquo;ve worked on a project where we had to migrate 42 servers from a data center to AWS as part of an AWS Migration Acceleration Program (MAP) deal. There was some pressure, since the contract with the data center would end about 2 months later and the customer didn&amp;rsquo;t want to renew or extend the current contract with the data center.&lt;/p&gt;</description></item><item><title>How to enable and configure Security Hub for PCI DSS compliancy checks using Terraform</title><link>https://justtinkering.nl/2022/11/09/how-to-enable-and-configure-security-hub-for-pci-dss-compliancy-checks-using-terraform/</link><pubDate>Wed, 09 Nov 2022 00:00:00 +0000</pubDate><guid>https://justtinkering.nl/2022/11/09/how-to-enable-and-configure-security-hub-for-pci-dss-compliancy-checks-using-terraform/</guid><description>&lt;h1 class="relative group"&gt;How to enable and configure Security Hub for PCI DSS compliancy checks using Terraform
 &lt;div id="how-to-enable-and-configure-security-hub-for-pci-dss-compliancy-checks-using-terraform" class="anchor"&gt;&lt;/div&gt;
 
 &lt;span
 class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"&gt;
 &lt;a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#how-to-enable-and-configure-security-hub-for-pci-dss-compliancy-checks-using-terraform" aria-label="Anchor"&gt;#&lt;/a&gt;
 &lt;/span&gt;
 
&lt;/h1&gt;
&lt;p&gt;&lt;a href="https://www.cloudnation.nl/inspiratie/blogs/enable-and-configure-security-hub-for-pci-dss-checks-with-terraform" target="_blank" rel="noreferrer"&gt;&lt;em&gt;This article is also posted here&lt;/em&gt;&lt;/a&gt;&lt;/p&gt;</description></item><item><title>How to use Github OIDC and Terraform to assume roles in AWS using WebIdentity</title><link>https://justtinkering.nl/2022/08/01/how-to-use-github-oidc-and-terraform-to-assume-roles-in-aws-using-webidentity/</link><pubDate>Mon, 01 Aug 2022 00:00:00 +0000</pubDate><guid>https://justtinkering.nl/2022/08/01/how-to-use-github-oidc-and-terraform-to-assume-roles-in-aws-using-webidentity/</guid><description>&lt;p&gt;When using Github Actions to deploy infrastructure to AWS with Terraform, you can &lt;a href="https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services" target="_blank" rel="noreferrer"&gt;use Open ID Connect (OIDC) to grant Github access to AWS&lt;/a&gt; without needing to provide access keys.&lt;/p&gt;
&lt;p&gt;As a GitHub workflow, this would be somewhat like this:&lt;/p&gt;</description></item></channel></rss>