Operations · Automation
Infrastructure as Code
Defining infrastructure declaratively in version controlled files so environments are reproducible and changes are reviewable.
AdvancedUpdated 2026-09-01
Overview
Declarative tools such as Terraform, Bicep and CloudFormation describe desired state and reconcile reality toward it. State files, modules and pipelines make environments reproducible and drift detectable.
The governance benefit is often larger than the speed benefit: every infrastructure change becomes a reviewed, attributable commit with a diff, which is difficult to achieve through consoles.
Security considerations
- Protect state files, they contain resource detail and sometimes secrets.
- Scan templates for insecure configuration in the pipeline, and require review for changes to identity and network resources.