RoseSecurity

Terraform Best Practices

Introduction

Terraform is a powerful tool for managing infrastructure as code. However, like any tool, Terraform has its own set of best practices that you should follow to ensure that your infrastructure is secure, reliable, and maintainable. This guide provides opinionated recommendations for Terraform best practices based on CloudPosse and HashiCorp guidance.

Variables

Use all lowercase with underscores as separators

RoseSecurity

stage:
  - test

trivy:
  stage: test
  image: docker:stable
  services:
    - name: docker:dind
      entrypoint: ["env", "-u", "DOCKER_HOST"]
      command: ["dockerd-entrypoint.sh"]

RoseSecurity

repos:
  # pre-commit install --hook-type pre-push
  - repo: https://github.com/pre-commit/pre-commit-hooks # Generic review/format
    rev: v4.4.0
    hooks:
      - id: check-json
      - id: detect-private-key
      - id: end-of-file-fixer
      - id: no-commit-to-branch
        args: ["--branch", "master"]

RoseSecurity

kubernetes-api-deprecation:
  image:
    name: golang:1.22-bookworm
  variables:
    KUBERNETES_TARGET_VERSION: "1.27"
  before_script:
    - apt-get update && apt-get install -y git
  script:
    - git clone https://github.com/doitintl/kube-no-trouble.git
    - cd kube-no-trouble/

RoseSecurity

#!/usr/bin/env python3

from flask import Flask, render_template, request, redirect
import os

# AWS Flask phishing application for harvesting credentials from mobile and desktop device logins.
# For the application to work, place the index.html file the templates directory and the style.css file in the static directory

app = Flask(__name__)

RoseSecurity

#!/usr/bin/env python3

import os

import argparse
import whisper
from pytube import YouTube
from transformers import pipeline

# Harness machine learning to summarize YouTube video transcriptions

RoseSecurity

#!/usr/bin/env python3

import urllib.request
from datetime import datetime, timedelta
import json

import matplotlib.pyplot as plt
from matplotlib.dates import DateFormatter

# Reference: https://apiexplorer.ercot.com/api-details#api=pubapi-apim-api&operation=getData_14

RoseSecurity

#!/usr/bin/env python3

import requests
import time

# Measure the Time To First Byte (TTFB) of a website by DNS lookup, TCP connection, SSL connection, and document HTTP
# request.
# Reference: https://www.debugbear.com/docs/metrics/time-to-first-byte

RoseSecurity

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

# Run script from command line via python3 find_pats.py

import click
import datetime
import time

from github import Github

RoseSecurity

name: Packer Format
on:
  pull_request:
    types: [opened, synchronize]
    paths:
      - '**/*'

permissions:
  contents: read
  pull-requests: write