DevOps "Office Hours" (2025-07-30)

Cloud Posse holds public "Office Hours" every Wednesday at 11:30am PST to answer questions on all things related to DevOps, Terraform, Kubernetes, CICD. Basically, it's like an interactive "Lunch & Learn" session where we get together for about an hour and talk shop. These are totally free and just an opportunity to ask us (or our community of experts) any questions you may have. You can register here: https://cloudposse.com/office-hours Join the conversation: https://slack.cloudposse.com/ Find out how we can help your company: https://cloudposse.com/quiz https://cloudposse.com/accelerate/ Learn more about Cloud Posse: https://cloudposse.com https://github.com/cloudposse https://sweetops.com/ https://newsletter.cloudposse.com https://podcast.cloudposse.com/ #officehours,#cloudposse,#sweetops,#devops,#sre,#terraform,#kubernetes,#awshucks Timestamps: [00:00:00] Intro [00:00:56] Announcements [00:01:05] AWSKeyLockdown: Automatically deactivate leaked AWS access keys for IAM users flagged by the AWSCompromisedKeyQuarantineV* policy https://github.com/clutchsecurity/AWSKeyLockdown https://www.clutch.security/blog/shattering-the-rotation-illusion-part-6-the-attackers-perspective-and-introducing-awskeylockdown [00:02:32] Atmos v1.184.0 - Faster state lookups, default values for custom command flags, fix to plan-diff https://github.com/cloudposse/atmos/releases/tag/v1.184.0 [00:09:32] Amazon EC2 now supports skipping the OS shutdown when stopping/terminating instances https://aws.amazon.com/about-aws/whats-new/2025/07/amazon-ec2-skip-os-shutdown-option-during-stop-terminate/ [00:10:14] GitHub Immutable Releases [Preview] https://github.com/github/roadmap/issues/1137 [00:11:01] A Radical Approach: Terraform without tfstate https://daydreamunicorn.com/en/blog/stateless_terraform/ [00:14:54] OpenTofu is Moving to CNCF Slack Workspace! #opentofu (Now - July 31st) https://slack.cncf.io/ [00:15:50] Zoom Chat Announcements [00:16:13] Network Firewall Transit Gateway Native Integration #43079 https://github.com/hashicorp/terraform-provider-aws/issues/43079 https://aws.amazon.com/about-aws/whats-new/2025/06/aws-network-firewall-transit-gateway-native-integration/ https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/networkfirewall_firewall_transit_gateway_attachment_accepter [00:20:32] GitHub Command Palette https://docs.github.com/en/get-started/accessibility/github-command-palette [00:27:41] Apply After Merge Discussion https://cloudposse.com/blog/apply-after-merge https://terramate.io/rethinking-iac/mastering-terraform-workflows-why-terramate-recommends-merge-before-apply/ [00:28:27] GitHub Enterprise Benefits for Startups https://cloudposse.com/blog/you-need-github-enterprise [00:32:50] Github Public Roadmap and Immutable Action Release in Q4 [00:35:48] GitHub vs Azure DevOps Discussion [00:39:20] HCL-based version of GitHub Actions and the advantages of YAML over JSON [00:41:52] Outro