Anton Babenko 🇺🇦

linkedin.comOne model is a guess. Three that agree is a plan.Why I shipped multi-model consensus as a plugin, plus two quieter tools that keep agents honest. Ask one model to plan something hard - a migration, a refactor, a cutover - and you get a fluent, confi...

18 May

One model is a guess. Three that agree is a plan. A single model is fluent and alone, so it rationalizes its first guess. You find out mid-execution. I shipped consensus: GPT + Gemini + Claude argue until they agree. Write-up: www.linkedin.com/pulse/one-mo... Repo: github.com/antonbabenko...

weekly.tfIssue #293 - AI Agents Write Terraform, Security as Code Guards It, a Cost Anomaly Detector Watches Your Bill, plus OpenDepot, terragucci at Scale, and Remote EU JobsA weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

12h

Terraform Weekly #293 - AI Agents Write Terraform, Security as Code Guards It, a Cost Anomaly Detector Watches Your Bill, plus OpenDepot, terragucci at Scale, and Remote EU Jobs www.weekly.tf/p/issue-293-...

weekly.tfIssue #292 - Terraform vs Crossplane for platforms, Terragrunt Stacks, import blocks in modules and Karpenter on EKSA weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

Terraform Weekly #292 - Terraform vs Crossplane for platforms, Terragrunt Stacks, import blocks in modules and Karpenter on EKS www.weekly.tf/p/issue-292-...

weekly.tfIssue #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savingsA weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

Terraform Weekly #291 - Less Terraform, more control: MCP apply gates, OpenTofu owner tags, module conventions, AI friendly code and CloudBurn AWS savings www.weekly.tf/p/issue-291-...

weekly.tfIssue #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detectionA weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

Terraform Weekly #290 - Least privilege everywhere: Pinterest RPP role chaining, AI-generated IAM policies, ephemeral MicroVM runners, and Tofu Controller drift detection www.weekly.tf/p/issue-290-...

weekly.tfIssue #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuildA weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

Terraform Weekly #289 - Terraform for AI agents, 6 golden rules for multi-environment Terraform, EKS to GKE with Kustomize, drift detection in CodeBuild www.weekly.tf/p/issue-289-...

weekly.tfIssue #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory

17 Sept

Terraform Weekly #288 - Why self-service infra fails, judging 3.4M lines of AI code, self-hosted OpenTofu registries, fork-free lifecycle rules, and agent memory www.weekly.tf/p/issue-288-...

weekly.tfIssue #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines

17 Sept

Terraform Weekly #287 - Autocomplete is broken for private modules, AVM as your IaC standard, TACOS scored side by side, tfgen replaces CDKTF, and multi env pipelines www.weekly.tf/p/issue-287-...

weekly.tfIssue #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault

17 Sept

Terraform Weekly #286 - Let Claude review terraform plan, Mount S3 inside Lambda, Enforce the Agentic AI Lens, Split monoliths with Demonolith, Stash tokens in tfvault www.weekly.tf/p/issue-286-...

weekly.tfIssue #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance

28 Aug

Terraform Weekly #285 - Serverless throttling with Terraform, agentic AI guardrails on Bedrock, EKS version traps, CDK and Crossplane at scale, plus tfpolicy governance www.weekly.tf/p/issue-285-...

weekly.tfIssue #283 - Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF

12 Aug

Terraform Weekly #283 - #Pulumi, AWS DevOps Agent deployed with Terraform, FinOps guardrails that block bad PRs, a Terragrunt and Ansible lab, the testing pyramid, and BrainTF www.weekly.tf/p/issue-283-...

weekly.tfIssue #278 - Scale Azure IaC on OpenTofu and AVM, clone full ECS stacks, govern Terraform on GitHub, master S3 lifecycle rules, and let AI review your PRs

24 June

Terraform Weekly #278 - Scale Azure IaC on OpenTofu and AVM, clone full ECS stacks, govern Terraform on GitHub, master S3 lifecycle rules, and let AI review your PRs www.weekly.tf/p/issue-278-...

github.comGitHub - antonbabenko/repro-lambda: Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf.Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf. - antonbabenko/repro-lambda

23 June

Another open-source tool from building compliance.tf repro-lambda builds AWS Lambda zips outside Terraform: byte-identical on macOS and CI, uploaded to S3 by content hash, then promoted dev -> prod with no rebuild. Terraform reads s3_existing_package instead of rebuilding on every plan.

weekly.tfIssue #277 - Least-Privilege CI/CD with OIDC, AWS Sovereign Cloud in Terraform, a Bedrock-Powered SRE RAG Bot, and Why terraform plan Misses Your Drift

19 June

Terraform Weekly #277 - Least-Privilege CI/CD with OIDC, AWS Sovereign Cloud in Terraform, a Bedrock-Powered SRE RAG Bot, and Why terraform plan Misses Your Drift www.weekly.tf/p/issue-277-...

weekly.tfIssue #276 - Terragrunt structure secrets, IaC that acts like software, Lambda on your own EC2, AzAPI unlocks Azure Actions, and AI that scans your Terraform

12 June

Terraform Weekly #276 - Terragrunt structure secrets, IaC that acts like software, Lambda on your own EC2, AzAPI unlocks Azure Actions, and AI that scans your Terraform www.weekly.tf/p/issue-276-...

weekly.tfIssue #275 - AI through IaC and module design pain, isolating Terraform state, Vince Analytics on Azure Container Apps with AVM, meta programming Terraform

27 May

Terraform Weekly #275 - AI through IaC and module design pain, isolating Terraform state, Vince Analytics on Azure Container Apps with AVM, meta programming Terraform www.weekly.tf/p/issue-275-...

github.comGitHub - antonbabenko/claude-delegator: Ask Codex, Gemini/Antigravity, and Grok (xAI) for second opinions or arbiter-mediated consensus inside Claude Code.Ask Codex, Gemini/Antigravity, and Grok (xAI) for second opinions or arbiter-mediated consensus inside Claude Code. - antonbabenko/claude-delegator

26 May

Released claude-delegator v1.13.0: - Grok (xAI) as 3rd provider - New Researcher + Debugger experts (7 in total) - /consensus: Claude commits a blind verdict before dispatching GPT/Gemini/Grok, then arbiter-mediated voting Prompts adapted from oh-my-openagent + PAL. github.com/antonbabenko...

weekly.tfIssue #274 - Agents write your infra code, Terraform 1.15 lands, Terragrunt splits state, Azure Copilot opens VS Code, plus Terraform Provider Query, Agent skill and Oxid

21 May

Terraform Weekly #274 - Agents write your infra code, Terraform 1.15 lands, Terragrunt splits state, Azure Copilot opens VS Code, plus Terraform Provider Query, Agent skill and Oxid www.weekly.tf/p/issue-274-...

weekly.tfIssue #273 - Boring Terraform beats clever, CUE schema validation, safe AVM module migrations with OpenRewrite, DriftGuard drift alerts, tfrev AI reviewer

14 May

Terraform Weekly #273 - Boring Terraform beats clever, CUE schema validation, safe AVM module migrations with OpenRewrite, DriftGuard drift alerts, tfrev AI reviewer www.weekly.tf/p/issue-273-...

weekly.tfIssue #272 - Dao of Terraform Modules at scale, the case Terraform is dead, cleanup that saved 20 dollars, PCI-DSS GKE for FinServ, Waffle on Bedrock

6 May

Terraform Weekly #272 - Dao of Terraform Modules at scale, the case Terraform is dead, cleanup that saved 20 dollars, PCI-DSS GKE for FinServ, Waffle on Bedrock www.weekly.tf/p/issue-272-...

weekly.tfHome | Terraform WeeklyA weekly newsletter about Terraform ecosystem (posts, tools, tips&tricks, open-source) with humble opinions by Anton Babenko.

4 May

Terraform Weekly newsletter (weekly.tf) is looking for sponsors! Reach 13K+ DevOps/SRE professionals interested in Terraform, AWS, cloud infrastructure, and platform engineering. 30% open rate 14% click-to-open rate Want to get in front of this audience? Send me a DM for more info.

weekly.tfIssue #271 - Terragrunt RIP, Bedrock AgentCore via Terraform, ephemeral migrations, OIDC click-to-deploy on EKS, a HCP Terraform TUI, and DrogonSec

29 Apr

Terraform Weekly #271 - Terragrunt RIP, Bedrock AgentCore via Terraform, ephemeral migrations, OIDC click-to-deploy on EKS, a HCP Terraform TUI, and DrogonSec www.weekly.tf/p/issue-271-...

weekly.tfIssue #270 - ISO 27001 on AWS with Terraform, S3 Files Kills SFTP, Terragrunt 1.0 Is Here, Claude Code for DevSecOps, and Compliance Resources

16 Apr

Terraform Weekly #270 - ISO 27001 on AWS with Terraform, S3 Files Kills SFTP, Terragrunt 1.0 Is Here, Claude Code for DevSecOps, and Compliance Resources www.weekly.tf/p/issue-270-...

github.comGitHub - antonbabenko/awesome-terraform-compliance: Awesome Terraform Compliance resourcesAwesome Terraform Compliance resources. Contribute to antonbabenko/awesome-terraform-compliance development by creating an account on GitHub.

13 Apr

Started a list so I can gather all the tools and relevant articles in one place. awesome-terraform-compliance - 50+ curated tools, frameworks, and resources specifically for Terraform and OpenTofu compliance. github.com/antonbabenko...

weekly.tfIssue #269 - EKS Auto Mode Unpacked, Terraform Tips From the Trenches, Managing DNS and Domains With IaC, and a New Watchdog for Infrastructure DriftEKS Auto Mode: Simplify Kubernetes with Terraform Setup

9 Apr

Terraform Weekly #269 - EKS Auto Mode Unpacked, Terraform Tips From the Trenches, Managing DNS and Domains With IaC, and a New Watchdog for Infrastructure Drift www.weekly.tf/p/issue-269-...

weekly.tfIssue #268 - AWS Lightsail AI Agents, Faster Terraform Applies, Local RAG for IaC, Lifecycle Rules Without Forks, and Combining Argo CD With Terraform

3 Apr

Terraform Weekly #268 - AWS Lightsail AI Agents, Faster Terraform Applies, Local RAG for IaC, Lifecycle Rules Without Forks, and Combining Argo CD With Terraform www.weekly.tf/p/issue-268-...

Anton Babenko 🇺🇦 reposted

Terraform Compliance for Cloud-Native Enterprise

@compliance.tf

30 Mar

Our blog post - a practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the Compliance.tf registry. tldr: "terraform init" is very quiet when something goes wrong. compliance.tf/blog/debuggi...

compliance.tfDebugging terraform init: 401, 403, 502, and What Your Headers Are Telling You | compliance.tfA practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the compliance.tf registry.

weekly.tfIssue #267 - Terraform MCP Meets Local LLMs for Air-Gapped IaC, GitHub Actions Drift Detection, 5 Dev Tips, InfraKitchen, Terravision, and AWS Lambda VPC Compliance Explained

26 Mar

Terraform Weekly #267 - Terraform MCP Meets Local LLMs for Air-Gapped IaC, GitHub Actions Drift Detection, 5 Dev Tips, InfraKitchen, Terravision, and AWS Lambda VPC Compliance Explained www.weekly.tf/p/issue-267-...

compliance.tfStop Paying the Terraform Fork Tax | compliance.tfIntroducing Operational Rules — your platform standards, enforced at terraform init. No more forking modules to add lifecycle blocks.

25 Mar

You can't customize ignore_changes in #Terraform modules. This has been an open issue since 2015. So teams fork modules to add lifecycle blocks. We just shipped a way to stop doing that. Operational Rules - for now, 7 rules, applied at terraform init. compliance.tf/blog/stop-pa...

weekly.tfIssue #266 - AWS ECS Explained, Guard Hook Workarounds, Pulumi as State Backend, and 90% Faster Terraform Testing with AI

20 Mar

Terraform Weekly #266 - AWS ECS Explained, Guard Hook Workarounds, Pulumi as State Backend, and 90% Faster Terraform Testing with AI www.weekly.tf/p/issue-266-...

weekly.tfIssue #265 - Dropping Prod with Terraform, the terraform.applying Symbol, AI Agents vs IaC, and Terraform Internals Unpacked

11 Mar

Terraform Weekly #265 - Dropping Prod with Terraform, the terraform.applying Symbol, AI Agents vs IaC, and Terraform Internals Unpacked www.weekly.tf/p/issue-265-...

weekly.tfIssue #264 - Semgrep Meets AI for IaC, Entra ID in Stacks, Feature Flags Beyond Booleans, AgentCore Bots

5 Mar

Terraform Weekly #264 - Semgrep Meets AI for IaC, Entra ID in Stacks, Feature Flags Beyond Booleans, AgentCore Bots, Terramate Infrastructure Self-Service www.weekly.tf/p/issue-264-...

weekly.tfIssue #263 - Gemini CLI Review Agents, Reliable Databricks Deployments, S3 Lifecycle Automation, HCP Terraform AI Guardrails

26 Feb

Terraform Weekly #263 - Gemini CLI Review Agents, Reliable Databricks Deployments, S3 Lifecycle Automation, HCP Terraform AI Guardrails www.weekly.tf/p/issue-263-...

weekly.tfIssue #262 - Terramate Environments, Landing Zone AI Agents, FastAPI Production Deployments, Terragrunt EKS Clusters, Route 53 DNSSEC Security, tfdocs-extras

19 Feb

Terraform Weekly #262 - Terramate Environments, Landing Zone AI Agents, FastAPI Production Deployments, Terragrunt EKS Clusters, Route 53 DNSSEC Security, tfdocs-extras www.weekly.tf/p/issue-262-...

weekly.tfIssue #261 - Stategraph, Native Terraform at Scale, Event-Driven Translation, Infrastructure Layers, Plan-to-Markdown, Serverless CI/CD Pipelines

13 Feb

Terraform Weekly #261 - Stategraph, Native Terraform at Scale, Event-Driven Translation, Infrastructure Layers, Plan-to-Markdown, Serverless CI/CD Pipelines www.weekly.tf/p/issue-261-...

weekly.tfIssue #260 - Preply's IaC Setup with Atlantis, Version Control with ASDF, Governance at Scale, ALB DNS Automation, and Graft's Module Overlay Pattern

4 Feb

Terraform Weekly #260 - Preply's IaC Setup with Atlantis, Version Control with ASDF, Governance at Scale, ALB DNS Automation, and Graft's Module Overlay Pattern www.weekly.tf/p/issue-260-...

weekly.tfIssue #259 - Everything as Code (incl. DNS), Terragrunt at Scale, Cloudflare v4 to v5 Migration, Self-Hosted GitLab Runners, CloudSlash for AWS Cost Optimization, Terraform Skill

29 Jan

Terraform Weekly #259 - Everything as Code (incl. DNS), Terragrunt at Scale, Cloudflare v4 to v5 Migration, Self-Hosted GitLab Runners, CloudSlash for AWS Cost Optimization, Terraform Skill www.weekly.tf/p/issue-259-...

weekly.tfIssue #258 - IaCConf, Multi-Environment GitHub Pipelines, ignore_changes Deep Dive, AWS Glue Data Exports, Terraform New Features, Agent Skill for Terraform and OpenTofu

22 Jan

Terraform Weekly #258 - IaCConf, Multi-Environment GitHub Pipelines, ignore_changes Deep Dive, AWS Glue Data Exports, Terraform New Features, Agent Skill for Terraform and OpenTofu www.weekly.tf/p/issue-258-...

github.comGitHub - antonbabenko/terraform-skill: The Claude Agent Skill for Terraform and OpenTofu - testing, modules, CI/CD, and production patternsThe Claude Agent Skill for Terraform and OpenTofu - testing, modules, CI/CD, and production patterns - antonbabenko/terraform-skill

18 Jan

I created a Claude skill called terraform-skill (terraform-best-practices + other trusted sources). In 2026, please stop saying "AI hallucinates with #Terraform". Use HashiCorp Terraform MCP + this skill so answers are grounded in real docs and battle-tested patterns. 🚀 github.com/antonbabenko...

weekly.tfIssue #257 - IaCConf, Terraform Secrets Protection, AI DevOps Agents, Pulumi's Multi-IaC Platform, Future of Open Source CDKTF, Terraform Қазақша (Kazakh)

16 Jan

Terraform Weekly #257 - IaCConf, Terraform Secrets Protection, AI DevOps Agents, Pulumi's Multi-IaC Platform, Future of Open Source CDKTF, Terraform Қазақша (Kazakh) www.weekly.tf/p/issue-257-...

weekly.tfIssue #256 - AWS Credits, Shift Left at Scale: Enterprise IaC, GitHub Repo Automation, CDK for Terraform (bye), and AWS IAM Security

17 Dec 2025

Terraform Weekly #256 - AWS Credits, Shift Left at Scale: Enterprise IaC, GitHub Repo Automation, CDK for Terraform (bye), and AWS IAM Security www.weekly.tf/p/issue-256-...

weekly.tfIssue #255 - Stop Misconfigurations with compliance.tf and OPA, Discover Provider Actions via Schema JSON, Secure Serverless with IAM Identity Center

10 Dec 2025

Terraform Weekly #255 - Stop Misconfigurations with compliance.tf and OPA, Discover Provider Actions via Schema JSON, Secure Serverless with IAM Identity Center www.weekly.tf/p/issue-255-...

weekly.tfIssue #254 - Terragrunt 2025, Provider Caching, Aurora IAM Users, and AWS Bill Shock Prevention

10 Dec 2025

Terraform Weekly #254 - Terragrunt 2025, Provider Caching, Aurora IAM Users, and AWS Bill Shock Prevention www.weekly.tf/p/issue-254-...

weekly.tfIssue #253 - Terraspace to Terramate Migration, Self-Hosted Registries with Cognito, MLOps Pipelines, and Custom CloudWatch Metrics

10 Dec 2025

Terraform Weekly #253 - Terraspace to Terramate Migration, Self-Hosted Registries with Cognito, MLOps Pipelines, and Custom CloudWatch Metrics www.weekly.tf/p/issue-253-...

weekly.tfIssue #252 - Secure Lambda Deployments, Team Workflows, AWS Control Tower Implementation, and OverlayFS Caching Techniques

Terraform Weekly #252 - Secure Lambda Deployments, Team Workflows, AWS Control Tower Implementation, and OverlayFS Caching Techniques www.weekly.tf/p/issue-252-...

weekly.tfIssue #251 - Harness, Terraform Security Scanning, SSM Parameter Management, Athena State Queries, AWS Backup vs Lambda, and ECS Fargate Deployment

Terraform Weekly #251 - Harness, Terraform Security Scanning, SSM Parameter Management, Athena State Queries, AWS Backup vs Lambda, and ECS Fargate Deployment www.weekly.tf/p/issue-251-...

weekly.tfIssue #250 - Plugin Framework Actions Tutorial, Multi-Cloud Drift Scanning Tools Compared, Atlantis Custom Workflows, Lock Files and EC2 BackupsExplore Terraform best practices: Plugin framework actions, drift scanning, Atlantis workflows, lock files, and EC2 backup strategies for DevOps professionals.

Terraform Weekly #250 - Plugin Framework Actions Tutorial, Multi-Cloud Drift Scanning Tools Compared, Atlantis Custom Workflows, Lock Files and EC2 Backups www.weekly.tf/p/issue-250-...

weekly.tfIssue #249 - Terraform Testing and TDD, Version Switcher Tool, AI Code with Copilot MCP, S3 Content Moderation, Secure EC2 Runners on AWSExplore Terraform best practices: TDD, version management, AI coding with Copilot, S3 content moderation, and secure EC2 runners in this comprehensive DevOps roundup.

Terraform Weekly #249 - Terraform Testing and TDD, Version Switcher Tool, AI Code with Copilot MCP, S3 Content Moderation, Secure EC2 Runners on AWS www.weekly.tf/p/issue-249-...

weekly.tfIssue #248 - Terraform State Locking Explained, Rightsize Terraform modules, Terraform with AI and GitHub Copilot, Terratags, Terramaid

23 Oct 2025

Terraform Weekly #248 - Terraform State Locking Explained, Rightsize Terraform modules, Terraform with AI and GitHub Copilot, Terratags, Terramaid www.weekly.tf/p/issue-248-...