Ravindra BagaleCourses & study guides मराठी

Ravi Sir's Cards › DevOps

Chapter 41: Terraform Environments and Jenkins Plan Approval Apply Pipeline: Cards

मराठी cards · Open the chapter

Revision cards

Environments: dev, stage and prod. Testing a change directly on production is how outages happen. Separate environments let you try changes safely first.
Revision card 1 of 3: Environments: dev, stage and prod · Download PNG · Open card page

Lesson: 41.1 Environments — dev, stage and prod

Jenkins pipeline: scan, plan, approval, apply. Engineers running apply from laptops means no review, no record and different versions.
Revision card 2 of 3: Jenkins pipeline: scan, plan, approval, apply · Download PNG · Open card page

Lesson: 41.2 Jenkins pipeline — scan, plan, approval, apply

Reading Checkov and tfsec results. Security mistakes in Terraform reach production fast. Scanners catch common ones before apply.
Revision card 3 of 3: Reading Checkov and tfsec results · Download PNG · Open card page

Lesson: 41.3 Reading Checkov and tfsec results

Interview cards

How do you separate dev, stage and prod in Terraform? Use the same modules with different inputs and a separate state for each environment, usually one folder per environment. For strong isolation, use separate AWS accounts.
Interview card 1 of 3: How do you separate dev, stage and prod in Terraform? · Download PNG · Open card page

Lesson: 41.1 Environments — dev, stage and prod

Why add a manual approval before terraform apply on prod? The plan may show destroys or big changes. A manual approval stage lets a person read the saved plan before anything changes in production.
Interview card 2 of 3: Why add a manual approval before terraform apply on prod? · Download PNG · Open card page

Lesson: 41.2 Jenkins pipeline — scan, plan, approval, apply

A Checkov check fails but you think it is a false alarm. What do you do? First read the check and confirm. If it is truly not needed, skip that one check on that one resource with a comment explaining why, so reviewers see it.
Interview card 3 of 3: A Checkov check fails but you think it is a false alarm. What do you do? · Download PNG · Open card page

Lesson: 41.3 Reading Checkov and tfsec results

Comparison cards

Checkov vs tfsec. Both scan Terraform code for security mistakes before apply.Checkov: by Prisma Cloud (Palo Alto Networks), many frameworks.tfsec: by Aqua Security, now part of Trivy.
Comparison card 1 of 3: Checkov vs tfsec · Download PNG · Open card page

Lesson: Chapter 41: Terraform Environments and Jenkins Plan Approval Apply Pipeline

Auto-apply vs manual approval. Auto-apply: the pipeline applies right after plan.Manual approval: the pipeline waits for a person to approve the plan.
Comparison card 2 of 3: Auto-apply vs manual approval · Download PNG · Open card page

Lesson: Chapter 41: Terraform Environments and Jenkins Plan Approval Apply Pipeline

Separate folders vs separate AWS accounts. Separate folders: envs/dev and envs/prod with their own state.Separate accounts: dev and prod live in different AWS accounts.
Comparison card 3 of 3: Separate folders vs separate AWS accounts · Download PNG · Open card page

Lesson: Chapter 41: Terraform Environments and Jenkins Plan Approval Apply Pipeline