Credential-Free Cloud Provisioning with Terraform Cloud Agent
summary
Demonstrates using the Terraform Cloud Agent (Business tier) running on ECS Fargate to remove static credentials from workspaces by having the provider obtain temporary credentials via AWS STS assume role at runtime. Agent is distributed as a Linux binary or Docker image, registers with Terraform Cloud, pulls plans, and runs them in a single-execution model; demo provisions and destroys an EC2 successfully, supports multi-account trust relationships, and can auto-scale agents for on-demand short‑lived credentials.
AI-written summary · about
chapters (8)
- 0:00Introduction and setup
- 2:20Terraform Cloud and agents overview
- 5:53Basic use case in private data center
- 9:21Private VPC provisioning
- 10:25Dynamic credentials with IAM
- 15:23Demo setup and repository
- 18:58Producer and consumer workspaces
- 23:53Advanced topics and grab bag
related talks
31mCommodified IaC using Terraform Cloud
55mSelf-service infrastructure is no longer a dream
19mSynchronization of Infrastructure Provisioning & Application Deployments
30mRight Place at the Right Time With the Right Token
53mProvisioning Cloud Infrastructure+Terraform
14mInfrastructure as Code IaC
29mInfinity and beyond: Scaling Terraform for the global enterprise
55mBest practices