Terraform

Terraform & Terragrunt Zero-to-Hero

A five-tier mastery path — Foundation to Specialist — for Terraform & Terragrunt: author modules for every service, orchestrate multi-environment infrastructure, enforce approval gates, and run an enterprise IaC platform.

Foundation → Intermediate → Advanced → Expert → Specialist ~210 hours 87 of 89 lessons ready HashiCorp Terraform Associate (003)
Start the course

A complete, job-oriented path through Terraform and Terragrunt: HCL and the core workflow, state and remote backends, authoring and versioning reusable modules, Terragrunt DRY multi-environment orchestration, CI/CD approval gates, policy-as-code, testing, drift recovery, and enterprise IaC platforms — plus a large hands-on real-world layer that provisions actual infrastructure with Terraform on Azure (incl. Azure DevOps pipelines), AWS (VPC/EC2/ALB/RDS/SRE), and Kubernetes on AWS EKS (IRSA, the AWS Load Balancer Controller, ExternalDNS, autoscaling, CSI storage) — and alternative IaC (Pulumi, CDKTF, CloudFormation, Ansible).

What you’ll be able to do

  • Write Terraform confidently — HCL, providers, the core workflow and state
  • Author, test, version and publish reusable modules for any cloud
  • Orchestrate dev/uat/staging/prod with Terragrunt — DRY, dependencies, remote state
  • Enforce approval gates, policy-as-code and OIDC keyless auth in CI/CD
  • Recover from drift and state corruption, and operate state at scale
  • Architect an enterprise IaC platform and be Terraform-Associate-ready

Prerequisites

  • Basic IT literacy and a terminal — no prior IaC experience required
  • A free cloud account (AWS/Azure/GCP) for the hands-on labs

Who it’s for

Engineers new to IaC, cloud engineers standardising infrastructure, and people preparing for the HashiCorp Terraform Associate or real platform-engineering work.

Curriculum

Tier 1 · Foundation — Terraform Basics (Associate)

Start at zero: what IaC is, HCL, the core workflow, state, and authoring your first reusable module.

  1. 1 Terraform Fundamentals: HCL, Providers, State & the Core Workflow Junior 21 min read
  2. 2 The Terraform CLI, In Depth: Install, First Steps & the Complete Command Reference Junior 29 min read
  3. 3 HCL, In Depth: Blocks, Arguments, Expressions, Types & Templates Junior 29 min read
  4. 4 Terraform Providers, In Depth: required_providers, Versions, Aliases & the Lock File Intermediate 26 min read
  5. 5 Terraform Resources & Meta-Arguments, In Depth: count, for_each, depends_on & lifecycle Intermediate 29 min read
  6. 6 Terraform Variables, Outputs & Locals, In Depth: Types, Validation, Sensitivity & Precedence Junior 26 min read
  7. 7 Infrastructure as Code: Core Concepts — State, Plan/Apply, Drift & Idempotency Junior 17 min read
  8. 8 Authoring Terraform Modules: Structure, Inputs/Outputs, Versioning & Publishing Intermediate 24 min read
  9. 9 Consuming Terraform Modules, In Depth: Sources, Versions, Composition & the Registry Intermediate 26 min read

Tier 2 · Intermediate — State, Remote Backends & HCL Depth

Scale beyond a laptop: remote state, dynamic blocks & complex types, and safe refactoring.

  1. 10 Terraform Remote State at Scale: Backends, Locking, Splitting, and State Surgery Advanced 14 min read
  2. 11 Terraform State, In Depth: the State File, the state Commands, Locking & Sensitive Data Intermediate 27 min read
  3. 12 Terraform Backends, In Depth: Local vs Remote, Every Backend Type, Locking & Migration Intermediate 28 min read
  4. 13 HCP Terraform (Terraform Cloud), In Depth: Workspaces, VCS-Driven Runs, Remote State & the Private Registry Intermediate 32 min read
  5. 14 Terraform Workspaces, In Depth: CLI Workspaces vs HCP Workspaces, State Isolation & When to Use Each Intermediate 29 min read
  6. 15 Mastering Terraform Dynamic Blocks, Complex Types, and Variable Validation Advanced 15 min read
  7. 16 Terraform Built-in Functions & Expressions, In Depth: for, dynamic, conditionals & the Function Catalog Intermediate 26 min read
  8. 17 Terraform Provisioners, In Depth: local-exec, remote-exec, connection, null_resource & terraform_data Intermediate 26 min read
  9. 18 Refactoring Terraform Safely with moved, import, and removed Blocks Advanced 14 min read

Tier 2 · Intermediate — Terragrunt

Stay DRY at scale: Terragrunt fundamentals, multi-account environments, and monorepo run-all.

  1. 19 Terragrunt Fundamentals: DRY Configurations, Remote State & Dependencies Intermediate 24 min read
  2. 20 Terragrunt Configuration, In Depth: Every Block, Function & Hook in terragrunt.hcl Advanced 32 min read
  3. 21 Terragrunt Stacks, In Depth: Units, Stacks, values & Generating Infrastructure from a Blueprint Advanced 30 min read
  4. 22 DRY Multi-Environment Infrastructure with Terragrunt: Stacks, Dependencies, and Promotion Intermediate 13 min read
  5. 23 Scaling Terragrunt Monorepos with Dependency Graphs and run-all Advanced 16 min read

Tier 3 · Advanced — Multi-Environment & CI/CD Approval Gates

Promote dev→uat→staging→prod safely: the 3-tier pattern, OIDC PR automation, Atlantis and Spacelift.

  1. 24 Multi-Environment 3-Tier Infrastructure with Terragrunt & CI/CD Approval Gates Advanced 24 min read
  2. 25 A Production Terraform CI/CD Pipeline on GitHub Actions with OIDC Advanced 16 min read
  3. 26 Deploy Atlantis for Pull-Request Terraform Automation with Server-Side Workflows Intermediate 18 min read
  4. 27 Configure Spacelift Stacks, OPA Policies, and Drift Detection for Terraform GitOps Advanced 18 min read

Tier 3 · Advanced — Policy-as-Code & Security

Guardrails on every plan: Checkov/tfsec/Trivy, OPA/Conftest, Sentinel, and secrets in IaC.

  1. 28 Building a Multi-Tool IaC Security Scanning Gate with Checkov and Trivy Advanced 16 min read
  2. 29 Policy-as-Code for Terraform with OPA and Conftest on the Plan JSON Advanced 15 min read
  3. 30 Enforcing Governance with HashiCorp Sentinel Policy Sets and Mocks Advanced 15 min read
  4. 31 Eliminating Long-Lived Secrets in IaC with Vault Dynamic Credentials Expert 14 min read

Tier 3 · Advanced — Testing & Provider Development

Prove modules work: native testing + Terratest, and building your own provider.

  1. 32 Testing Terraform for Real: Native terraform test, Terratest, and Policy Checks in CI Advanced 13 min read
  2. 33 Building a Custom Terraform Provider with the Plugin Framework Expert 16 min read

Tier 3 · Advanced — State Operations, Drift & Orchestration

Operate state in anger: drift reconciliation, state surgery/recovery, and stacks orchestration.

  1. 34 Detecting and Reconciling Terraform Drift Without Nuking Production Advanced 14 min read
  2. 35 Terraform State Surgery: Recovering from Corruption, Locks, and Split-Brain Expert 16 min read
  3. 36 Importing Existing Infrastructure into Terraform, In Depth: import Blocks, Config Generation & Brownfield Adoption Advanced 30 min read
  4. 37 Orchestrating Multi-Environment Infrastructure with Terraform Stacks Expert 16 min read

Tier 4 · Real-World — Terraform on Azure (Infrastructure & Azure DevOps)

Apply Terraform to Azure end to end: the azurerm provider and remote state, resource groups, networking, VMs, load balancing, App Service, AKS, Key Vault/SQL/DNS, Azure DevOps CI/CD pipelines, and multi-environment landing zones — every lesson a complete, runnable demo.

  1. 38 Terraform on Azure: The azurerm Provider, Authentication (CLI/SPN/MSI/OIDC) & Remote State in Azure Storage Intermediate 46 min read
  2. 39 Terraform on Azure: Resource Groups, Storage Accounts, Naming Conventions & Tagging Strategy Intermediate 49 min read
  3. 40 Terraform on Azure: Virtual Networks, Subnets, NSGs, Route Tables & VNet Peering Intermediate 34 min read
  4. 41 Terraform on Azure: Linux & Windows Virtual Machines, NICs, Public IPs, cloud-init & Scale Sets Senior 46 min read
  5. 42 Terraform on Azure: Azure Load Balancer, Application Gateway, WAF & Health Probes Senior 35 min read
  6. 43 Terraform on Azure: App Service Plans, Web Apps, Deployment Slots & Custom Domains Senior 40 min read
  7. 44 Terraform on Azure: Key Vault (Secrets), Azure SQL Database & Azure DNS as Code Senior 56 min read
  8. 45 Terraform on Azure: Provisioning AKS — Node Pools, Managed Identity, RBAC, Add-ons & kubeconfig Expert 46 min read
  9. 46 Terraform CI/CD with Azure DevOps: YAML Pipelines, Service Connections, plan/apply Stages & Approval Gates Expert 36 min read
  10. 47 Terraform on Azure at Scale: Reusable Modules, Multi-Environment Landing Zones & SRE Practices Expert 48 min read

Tier 4 · Real-World — Terraform on AWS (Infrastructure & SRE)

Apply Terraform to AWS end to end: the aws provider and S3+DynamoDB remote state, VPC networking, EC2 and security groups, ALB/NLB load balancing, Auto Scaling, Route 53 and ACM, RDS/Aurora, IAM and S3, CloudWatch/SNS observability, and a full 3-tier architecture with reusable modules and SRE practices — every lesson a complete, runnable demo.

  1. 48 Terraform on AWS: The aws Provider, Authentication (Profiles/Assume-Role/OIDC) & Remote State in S3 + DynamoDB Intermediate 47 min read
  2. 49 Terraform on AWS: Building a VPC — Public/Private Subnets, Internet & NAT Gateways & Route Tables Senior 44 min read
  3. 50 Terraform on AWS: EC2 Instances, Security Groups, Key Pairs, EBS Volumes & user-data Senior 48 min read
  4. 51 Terraform on AWS: Application & Network Load Balancers, Target Groups, Listeners & Health Checks Senior 37 min read
  5. 52 Terraform on AWS: Auto Scaling Groups, Launch Templates, Scaling Policies & ALB Integration Senior 36 min read
  6. 53 Terraform on AWS: Route 53 DNS (Records, Alias, Failover, Weighted) & ACM SSL Certificates Senior 58 min read
  7. 54 Terraform on AWS: RDS & Aurora — Subnet Groups, Parameter Groups, Multi-AZ, Read Replicas & Secrets Senior 58 min read
  8. 55 Terraform on AWS: IAM (Users, Roles, Policies, Instance Profiles) & S3 (Buckets, Policies, Encryption, Versioning) Senior 54 min read
  9. 56 Terraform on AWS: CloudWatch Alarms, Dashboards & Logs, SNS Alerting & SRE Observability as Code Senior 36 min read
  10. 57 Terraform on AWS at Scale: A 3-Tier Web Architecture, Reusable Modules, Multi-Environment & SRE Expert 47 min read

Tier 5 · Specialist — Terraform on AWS EKS (Kubernetes Platform, 50-Demo Scope)

Provision and run a production Kubernetes platform on EKS entirely with Terraform: the cluster/VPC/node groups, IRSA, the kubernetes & helm providers and the GitOps handoff, the AWS Load Balancer Controller, ALB Ingress + ACM + ExternalDNS, Cluster Autoscaler & Karpenter, HPA/VPA, EBS & EFS CSI storage, Fargate, observability, and the end-to-end platform capstone — every lesson a runnable demo.

  1. 58 Terraform on AWS EKS: Provisioning the Cluster, VPC & Managed Node Groups from Scratch Expert 48 min read
  2. 59 Terraform on AWS EKS: OIDC Provider & IRSA — IAM Roles for Service Accounts (the Core Security Pattern) Expert 57 min read
  3. 60 Terraform on AWS EKS: the kubernetes & helm Providers, App Deployment & the GitOps Handoff Expert 47 min read
  4. 61 Terraform on AWS EKS: Installing the AWS Load Balancer Controller (IRSA + Helm) Expert 38 min read
  5. 62 Terraform on AWS EKS: ALB Ingress, ACM SSL, ExternalDNS & Route 53 Automation Expert 64 min read
  6. 63 Terraform on AWS EKS: Node Autoscaling with Cluster Autoscaler & Karpenter Expert 48 min read
  7. 64 Terraform on AWS EKS: Metrics Server, Horizontal & Vertical Pod Autoscaling Senior 63 min read
  8. 65 Terraform on AWS EKS: the EBS CSI Driver, StorageClasses & Persistent Volumes for Stateful Workloads Senior 44 min read
  9. 66 Terraform on AWS EKS: the EFS CSI Driver & Shared ReadWriteMany Storage Senior 38 min read
  10. 67 Terraform on AWS EKS: Fargate Profiles — Serverless Pods Without Managing Nodes Senior 45 min read
  11. 68 Terraform on AWS EKS: Observability — CloudWatch Container Insights, Prometheus & Grafana Senior 39 min read
  12. 69 Terraform on AWS EKS: Assembling a Production Platform — the End-to-End Capstone Expert 48 min read

Tier 4 · Expert — IaC Tool Selection

Choose the right tool: Terraform vs Terragrunt vs Ansible vs Pulumi.

  1. 70 Terraform vs Terragrunt vs Ansible vs Pulumi: Which IaC Tool, When? Intermediate 17 min read

Tier 5 · Specialist — Alternative IaC & Multi-Cloud

Beyond Terraform: Pulumi, CDKTF, CloudFormation, Crossplane and Bicep.

  1. 71 Programmatic IaC with Pulumi and TypeScript: Component Resources and the Automation API Intermediate 13 min read
  2. 72 Advanced Pulumi in Python: Dynamic Providers and Stack References Advanced 16 min read
  3. 73 Programmatic Infrastructure with CDK for Terraform in TypeScript Advanced 15 min read
  4. 74 Advanced CloudFormation: StackSets, Custom Resources, Hooks, and Drift at Org Scale Expert 16 min read
  5. 75 Extending CloudFormation with Macros, Transforms, and CDK Escape Hatches Expert 16 min read
  6. 76 Building an Internal Cloud API with Crossplane Compositions and XRDs Expert 17 min read
  7. 77 Shipping Azure Workloads with Bicep: Deployment Stacks, what-if, and a CI Pipeline coming soon
  8. 78 Operating a Bicep Private Module Registry and Templating at Scale coming soon

Tier 5 · Specialist — Configuration Management (Ansible)

Configure servers idempotently: Ansible collections/testing and dynamic inventory.

  1. 79 Engineering Idempotent Ansible Collections with Molecule Testing Advanced 16 min read
  2. 80 Dynamic Inventory and Secure Secrets for Ansible at Cloud Scale Advanced 16 min read

Tier 5 · Specialist — 3rd-Party Integrations & On-Prem Provisioning

Terraform everywhere: Datadog, Snowflake, vSphere/Packer, Nutanix and OpenStack.

  1. 81 Configure Datadog Monitors, SLOs, and Synthetic Browser Tests as Code with Terraform Advanced 18 min read
  2. 82 Set Up Snowflake RBAC, Resource Monitors, and Warehouse Auto-Suspend with Terraform Intermediate 17 min read
  3. 83 Provision VMware vSphere Clusters with Packer and Terraform Golden Images Intermediate 18 min read
  4. 84 Set Up Nutanix AHV Clusters with Prism Central and the Terraform NX Provider Advanced 18 min read
  5. 85 Provision OpenStack Compute and Networking with Terraform and Heat Templates Advanced 18 min read

Track · Troubleshooting (Easy → Complex)

Diagnose anything: state, providers, drift, dependencies and CI/CD failures.

  1. 86 Terraform Troubleshooting: State, Providers, Drift, Dependencies & Debugging Intermediate 26 min read

Track · Architecting (Easy → Complex)

Turn requirements into IaC platforms: a six-rung ladder from a single module to an enterprise platform.

  1. 87 The Terraform Architecting Ladder: From a Single Module to an Enterprise IaC Platform Advanced 30 min read

Track · Certification Center

Pass the exam: the HashiCorp Terraform Associate (003) prep kit.

  1. 88 HashiCorp Terraform Associate (003) Prep Kit: Objectives, Practice Questions & Cheat Sheet Advanced 26 min read

Track · Job-Ready — Projects

Get hired: a six-project portfolio ladder from a first module to a multi-cloud platform.

  1. 89 Real-World Terraform Portfolio Projects: From a First Module to a Multi-Cloud Platform Advanced 19 min read
All courses