Security on Omar H.Ajmi | Python, Java, Terraform & DevOps TILs

🍱 Terraform state: the file you shouldn't casually commit

Fri, 11 Sep 2026 00:00:00 +0000

🍱 Terraform state: the file you shouldn’t casually commit

You avoided hardcoding a password in Terraform. Nice. You added sensitive = true. Even nicer.

So the secret is safe now, right?

Well… not necessarily. 😬

🧠 The principle

Terraform state tracks managed infrastructure and can contain resource attributes and sensitive values. Terraform plan files can also contain sensitive data.

🐍 Python 3.14: t-Strings Look Like f-Strings, But They Aren't Strings

Tue, 21 Oct 2025 00:00:00 +0000

🐍 Python 3.14: t-Strings Look Like f-Strings, But They Aren’t Strings

An f-string takes your variables and glues them into a string immediately. That’s lovely for greetings and terrible for SQL, HTML and shell commands, where “just glue it” is how injection bugs are born.

🧪 AI Makes Writing Code Cheap. Getting It Right Is Still Expensive.

Tue, 15 Apr 2025 00:00:00 +0000

🧪 AI Makes Writing Code Cheap. Getting It Right Is Still Expensive.

🧪 Fluent isn’t correct

It’s getting easier to produce code. That doesn’t automatically make it easier to ship good software.

🤫 Terraform: Write-Only Arguments Keep Secrets Out of State

Tue, 18 Mar 2025 00:00:00 +0000

🤫 Terraform: Write-Only Arguments Keep Secrets Out of State

You generate a database password in Terraform. It works. Then you open the state file and there it is, in plain text, waiting for anyone with read access.

Marking a variable sensitive hides it from CLI output, but it doesn’t remove it from state. Terraform 1.11 adds a better tool for some of these cases.