TERRAFORM
Request Temporary AWS Access from the CLI: SSO Elevator 5.0
SSO Elevator is FivexL’s open-source Terraform module for just-in-time AWS access through IAM Identity Center. People request a permission set in an account, or membership in an IAM Identity Center group, from Slack. Approvers approve in Slack. The module grants the access and removes it when …
How to Reduce AWS Config Costs in AWS Control Tower
If you run AWS Control Tower, you’ve probably noticed that AWS Config records everything in every managed account. The bill and the noise both grow with each new account. Why the AWS Config bill keeps growing AWS Config records every supported resource type, and you pay based on the number of …
Bridging the Gap: Automating Group Assignments in AWS IAM Identity Center with SSO Elevator
Google Workspace SCIM provisioning to AWS IAM Identity Center does not sync groups - a frustrating limitation. SSO Elevator now offers a Terraform-native solution that automatically assigns users to groups based on their attributes, eliminating the need for external tools like ssosync.
MVP: PostgreSQL on AWS in 10 Minutes
A lot of MVP teams pick PostgreSQL because it’s familiar, powerful, and boring in the best way. Then they open the AWS console, click through defaults, and accidentally create a database that’s hard to secure, annoying to operate, and painful to make audit-friendly later. In our work …
Unexpectedly Hard: Overcoming Pitfalls in aws_acm_certificate setup
Encountering the “Invalid for_each argument” and “UnsupportedCertificate” errors when configuring AWS ACM certificates via Terraform is surprisingly common. By removing dynamic for_each logic based on unknown attributes and using the aws_acm_certificate_validation resource to wait for certificate …
Moving Terraform Managed Resources Between States for Scaling AWS Infrastructure in Startups
Comprehensive comparison and a step-by-step guide for implementing two methods for moving Terraform managed resources between states in AWS infrastructure in terms of speed, reliability and scalability.