https://blog.plzhans.com/en/categories/devops/Recent content in Devops on plzhans blogHugoenSun, 30 Aug 2026 01:20:00 +0000https://blog.plzhans.com/en/posts/103-terraform-practical-guide-aws-sso-assumerole-state-backend/Wed, 06 May 2026 13:52:00 +0000https://blog.plzhans.com/en/posts/103-terraform-practical-guide-aws-sso-assumerole-state-backend/<p><picture> <source srcset="https://blog.plzhans.com/posts/103-terraform-practical-guide-aws-sso-assumerole-state-backend/assets/1_38322a0f-7e83-804b-a963-f4d395ba7a9c_hu_44eac8c373d362af.webp" type="image/webp"> <img src="https://blog.plzhans.com/posts/103-terraform-practical-guide-aws-sso-assumerole-state-backend/assets/1_38322a0f-7e83-804b-a963-f4d395ba7a9c_hu_4b9c6c2e39371448.png" alt="Cover image showing the flow of declaring infrastructure as code with Terraform and operating it with AWS credentials and remote state" width="1200" height="670" loading="eager" fetchpriority="high"> </picture></p> <h2 id="overview">Overview</h2> <p>Terraform is an IaC tool that declares infrastructure in HCL and applies changes with <code>plan</code> and <code>apply</code>. In team operations, a pattern of configuring <strong>remote state</strong> together with <strong>AssumeRole-based credentials</strong> is common.</p> <h3 id="what-is-terraform">What is Terraform?</h3> <ul> <li>Declares infrastructure such as servers, networks, and permissions as code (HCL) and reproduces them consistently</li> <li>Previews changes with <code>plan</code> and creates/modifies actual resources with <code>apply</code></li> <li>Tracks the &ldquo;current infrastructure state&rdquo; with a state file, managing differences between code and actual resources</li> </ul> <blockquote> <p>:white_check_mark: The recommended flow is init -&gt; fmt -&gt; validate -&gt; plan -&gt; apply.</p>