On Nasqueron, deployments occur on a dedicated deployment server, distinct from the development servers, both for configuration-as-code and infrastructure-as-code. Terraform state files, terraform.tfstate, are stored on our deployment server, and can contain both credentials and personal information: plaintext secrets or accounts metadata injected by providers. To protect this information, we can take two complementary approaches: […]
Read more