Skip to content

Back to the catalog

x.comthread

Prasenjit Sarkar (@stretchcloud) on X

Thread by Prasenjit Sarkar on whether infrastructure as code survives AI agents, prompted by James Ward's claim that IaC is dead and Darren Shepherd's rebuttal. It describes HCP Terraform as a governance layer for agent-written infrastructure: project-scoped identities, per-run short-lived OIDC credentials, policy-as-code plan checks, and the tfctl CLI with dry-run and destructive-operation guardrails. It also covers Pulumi's Neo agent and Firefly's point that direct cloud API calls by agents leave no diff, audit trail or rollback.

TL;DR Argues IaC becomes the control plane for infrastructure-changing AI agents, using HCP Terraform's scoped identities, short-lived credentials and guardrails as the example.
Open original ↗
Also seen from another angle🛡️ Security →

Organisations named here

  • HashiCorp
  • Darren Shepherd
  • Firefly
  • James Ward
  • Prasenjit Sarkar
  • Pulumi

Technologies named here

  • NEO
  • Terraform
  • HCP Terraform
  • Pulumi
  • Pulumi Neo
  • tfctl

Standards and laws named here

  • OIDC

Techniques named here

  • OIDC short-lived credentials
  • policy as code

Concepts named here

  • Auditability of agent actions
  • infrastructure as code

Related in agents