Mattias Fjellström

Monitoring services: A Deep Dive in AWS Resources & Best Practices to Adopt - Anyshift.io Learn how to monitor AWS environments using native tools like CloudWatch, CloudTrail, and Config — all managed with Terraform. Best practices, cost insights, and how Anyshift’s AI SRE helps you optimi...

Learn about #AWS monitoring services in my latest blog post over at #Anyshift ➡️ www.anyshift.io/blog/a-deep-...

Terraform Search: Deep-Dive Over the past few years there have been many features related to configuration-driven state manipulation.

#Terraform search is declarative resource discovery. Write queries in .tfquery.hcl files, discover resources fulfilling your queries, export resource configuration and import blocks to bring the resources under management by Terraform!

Read more ➡️ mattias.engineer/blog/2025/te...

Terraform Actions: Deep-Dive Terraform actions represent a new language concept in Terraform 1.

#Terraform actions allow you to declaratively perform operations outside the normal CRUD workflow.

I've put together a deep-dive into this new concept mattias.engineer/blog/2025/te...

#hashiconf

Migrate your Azure Terraform Configuration from AzAPI to AzureRM I recently browsed through Azure updates and found two features that were recently moved to general availability (GA) that I wanted to try out.

Migrate your #Terraform configurations from the AzAPI provider to the AzureRM provider ➡️ mattias.engineer/blog/2025/mi...

#azure #mvpbuzz #microsoft #hashicorp

Provisioning Speed Comparison: Terraform for AKS versus EKS A few weeks ago I came across a post on LinkedIn where someone said that provisioning infrastructure on Amazon Web Services (AWS) was 10, 100, or even 1000 times faster compared to provisioning equiva...

Does provisioning speed matter? It might!

I saw a post claiming that it took 10x, 100x, or even 1000x longer to provision infrastructure on #Azure compared to #AWS. Is that true?

I ran a comparison for managed #Kubernetes services from each provider: mattias.engineer/blog/2025/ak...

#terraform

Join me for #HashiConf on September 24-26 in San Francisco, where I will be giving the talk: "Infrastructure and application landing zones on HCP". www.hashicorp.com/en/conferenc... @hashicorp.com

Multi-Cloud Provisioning and Management with Terraform Learn how to manage multi-cloud infrastructure with Terraform. Explore provisioning strategies, best practices, and real-world examples.

#Terraform is great because it is not simply for one provider/one cloud. You can target multiple clouds in the same Terraform configuration. It doesn't have to be multiple clouds, the more generic term is multiple providers (e.g. #Azure + Entra ID)

spacelift.io/blog/terrafo...

AWS Lambda: A Deep Dive in AWS Resources & Best Practices to Adopt - Anyshift.io Learn how AWS Lambda works, how to deploy and manage Lambda functions using Terraform, and discover best practices for optimizing performance, security, and cost in serverless architectures.

I've always been fascinated by #AWS #Lambda. It it something appealing over FaaS: write a self-contained function that performs a given job and deploy it.

I don't think I write enough Lambda functions these days - is it even possible?

www.anyshift.io/blog/aws-lam...

Import resources to your #Terraform state using resource identity instead of resource ID.

There is now some support for #AWS resources (still not full support).

This features makes the import blocks look much cleaner!

Managing AWS Tags Tagging AWS resources is more or less a requirement when you go from managing a few resources to managing multiple AWS accounts.

Managing tags on AWS requires planning and tools.

In this blog post I go through a few ideas around tagging strategy and how to enforce and monitor your environment for tag compliance.

Read the blog post at mattias.engineer ➡️ mattias.engineer/blog/2025/ma...

#aws #terraform #hashicorp

Manage AWS IPAM with Terraform In a previous blog post I covered how to manage the IPAM service on Azure with Terraform.

The best way to manage IP addresses on #AWS is with the VPC IPAM service, and the best way to manage anything on AWS is with #Terraform - change my mind :D

I go through how to manage IPAM on AWS with Terraform in a blog post here ➡️ mattias.engineer/blog/2025/aw...

Manage Azure IPAM with Terraform Managing IP addresses across teams, environments, subscriptions, and even Azure tenants, can be complex.

I wrote a blog post on how to manage #Azure IPAM (IP address management) with #Terraform

Learn more here ➡️ mattias.engineer/blog/2025/az...

#MVPBuzz #Microsoft #HashiCorp

Nomad on Azure (Part 3): Nomad clients and a first Nomad job In the previous post we introduced Consul to help us to bootstrap a Nomad cluster.

In part 3 of #NomadOnAzure we add #Nomad clients to our cluster and we run a first Nomad job ⚙️.

Read the blog post here ➡️ mattias.engineer/blog/2025/no...

#MVPBuzz #Microsoft #Azure #HashiCorp #HashiCorpAmbassador

Nomad on Azure (Part 2): The one where we introduce Consul One issue we discovered in the previous blog post in this series was that to use cloud auto-join to bootstrap a Nomad cluster we need to read tags set on the NICs attached to the VMs in a VMSS.

In part 2 of #NomadOnAzure we introduce #Consul to simplify forming a #Nomad cluster of servers.

Read the blog post here ➡️ mattias.engineer/blog/2025/no...

#MVPBuzz #Microsoft #Azure #HashiCorp #HashiCorpAmbassador

Nomad on Azure (Part 1): A first attempt to provision servers This is the first part in a series of blog posts where I will provision HashiCorp Nomad on Microsoft Azure.

Follow along on my journey to provision #Nomad on #Azure using #Terraform infrastructure as code!

#mvpbuzz

mattias.engineer/blog/2025/no...

S3 Buckets: A Deep Dive in AWS Resources & Best Practices to Adopt - Anyshift.io Learn how to manage Amazon S3 with Terraform, explore best practices for securing and optimizing blob storage, and see how Anyshift can help you safely evolve your AWS infrastructure.

Learn about managing Amazon S3 using Terraform www.anyshift.io/blog/amazon-...

#anyshift #aws #s3

Developer Self-Service with HCP Waypoint and Minecraft Developer self-service is great!

Manage your Minecraft world in a self-service fashion using HCP Waypoint + HCP Terraform.

#terraform #waypoint #hcp #minecraft #aws

mattias.engineer/blog/2025/de...

What are Terraform Stacks? Setup & Use Cases Learn how to set up and work with Terraform Stacks. Discover the use cases, benefits, and alternatives to Terraform Stacks.

What are Terraform Stacks ➡️ spacelift.io/blog/terrafo...

#terraform

Terraform Authoring and Operations Professional in Amsterdam

I'm going for a long weekend in Amsterdam soon. I was not planning on bringing my book with me so this ChatGPT-rendered image is a great substitute.

#Terraform Authoring and Operations Professional Study Guide goes Tokyo

ChatGPT butchered the book a tiny bit, but overall very nice rendition of the typical reader of my book!

#terraform

I once (by accident) wrote "Dead <name>," as the first line in an email.

A week later the person I sent the email to passed away after a short period of illness.

Needless to say I am still haunted by this til this day.

Maybe having an AI write the boilerplate parts of an email is not so bad?

DNS: A Deep Dive in AWS Resources & Best Practices to Adopt - Anyshift.io DNS: A Deep Dive in AWS Resources

Learn about AWS DNS with Route 53: managing it with Terraform, best practices and potential pitfalls!

#terraform #anyshift

www.anyshift.io/blog/dns-a-d...

What is the best cloud?

Identity and Access Management (IAM): A Deep Dive in AWS Resources & Best Practices to Adopt - Anyshift.io Explore AWS Identity and Access Management (IAM), its role in securing cloud environments, and best practices to prevent misconfigurations and manage permissions effectively.

Learn about #AWS #IAM best practices, challenges with managing IAM with #Terraform when you have hidden dependencies, and more

#anyshift

www.anyshift.io/blog/a-deep-...

Access Azure from HCP Terraform with OIDC federation Securely access Azure from HCP Terraform using OIDC federation, eliminating the need to use long-lived credentials for authentication.

Learn about authenticating without explicit credentials to Azure from HCP Terraform

www.hashicorp.com/blog/access-...

#hashicorp #terraform #microsoft #azure

HashiCorp Certified: Terraform Associate (003) This self-study course prepares you for the Terraform Associate certification through theoretical lessons and practice quizzes similar to the actual exam.

I've published a course for the #Terraform associate certification on #Leanpub!

It's 90% done, and available at a reduced minimum price until I consider it to be 100% complete. A few illustrations, quizzes and general polishing left to complete!

leanpub.com/c/terraform-...

.gitignore Command Guide: Practical Examples and Terraform Tips | env0 Learn how to use .gitignore to exclude large binaries, sensitive files, and build artifacts in Git and Terraform projects.

Things that you commit to git tends to stay in the git history, even if you remove the file afterwards.

Although it is possible to clean up your git history, it's a good idea is to keep unintended files out from git to begin with.

Use .gitignore for this www.env0.com/blog/gitigno...

#env0 #git

Terraform Split and Join Functions: Examples and Best Practices | env0 Learn how HCL 'split' and 'join' functions can be used for efficient string manipulation, with advanced examples.

My first post on env0.com is live!

Read about the Terraform split and join functions here www.env0.com/blog/terrafo...

#env0 #iac #terraform