A secure automation platform: Terraform Enterprise, Ansible Automation Platform, & Vault Enterprise
summary
Air France–KLM moves legacy orchestration to a Terraform Enterprise core integrated with Ansible Automation Platform and Vault Enterprise, running via GitHub Actions and Packer. The platform manages 7,200 workspaces, 450 teams and 90 registry modules, issues dynamic secrets (JWT/GitHub auth) and short‑TTL SSH keys, rotates LDAP passwords automatically, and enforces policy‑as‑code. Provisioning errors drop by more than 70% and automation avoids tens of thousands in weekly cloud spend while shifting teams from manual tasks to fast, compliant deployments.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:55Company background
- 3:51Automation journey
- 6:54Cloud transformation
- 9:31Integration strategy
- 12:08Security demo
- 16:48Advanced platform usage
- 19:42Results and conclusion
related talks
41mAutomating Multi-Cloud, Multi-Region Vault for Teams and Landing Zones
15mA Diary of Change in the Dusty Financial Sector
21mSolving AWS IAM Challenges at Scale With Terraform
30mRight Place at the Right Time With the Right Token
46mVault configuration as code via HashiCorp Terraform - Stories from trenches
22mDeploying Terraform Enterprise in a Highly Secure Environment at Morgan Stanley
01h 01mRethinking the “Sec” in DevSecOps for modern architectures
32mGotchas Using Terraform in a Secure Delivery Pipeline