Zero-Trust AI Agent Access in Practice: IBM watsonx and HashiCorp Boundary
A HashiCorp proof of concept gives AI agents infrastructure access via Boundary and Vault without exposing credentials, with IBM watsonx doing the reasoning.
Terraform Google Cloud Provider 8.0 Is GA — Three Breaking Changes That Will Affect Your Infrastructure
Terraform's Google Cloud provider 8.0 changes the default load balancer scheme and removes deprecated resources: three breaking changes to plan for.
HCP Terraform Now Has Pre-Written AWS and CIS Compliance Policies You Don't Have to Maintain
HCP Terraform launched a native pre-written policy library with AWS Foundational Security Best Practices and CIS Foundations Benchmark policies. Platform teams can enforce them at Advisory or Mandatory level without writing or maintaining Rego/Sentinel. Azure and GCP policies are coming. Currently in public beta.
India's Regulatory Wave: The 5 Security Controls Every Organization Needs Now
DPDP, SEBI CSCRF, CERT-In, and RBI data localization all demand the same five controls. HashiCorp Vault and Boundary address most of them directly.
HashiCorp Vault Agentic IAM Is Now GA: Managing AI Agents Like Identities
Vault Enterprise 2.1 brings AI agent identity management to general availability — per-request OAuth controls, a centralized agent registry, and Terraform provisioning for agent credentials.
Packer v1.16.0 Brings SLSA Provenance to Machine Images — Here's What That Means
HashiCorp's Packer v1.16.0 adds native SLSA provenance generation and verification to machine image builds. The result: cryptographically signed build records, four signing modes, and packer verify-attestation for enforcement pipelines.
HCP Terraform as the Control Plane for AI-Driven Infrastructure
HashiCorp's case for HCP Terraform as the governance layer for AI agents writing infrastructure code: provenance, policy gates, scoped identities, isolated workspaces, and audit trails agents can't bypass.
Terraform's New Undo Button Fixes Its Scariest Failure Mode
HCP Terraform's new Stacks restore feature undoes accidental workspace deletion with one click — part of a broader release addressing monorepo sprawl and migration friction.
Autonomous Infrastructure for Agentic Workflows
HashiCorp's seven-layer model for governing infrastructure as AI agents make changes at machine speed, from code to policy-bound self-service.
AI Coding Speed Is Outrunning Secrets Security
Nearly 30 million secrets leaked on GitHub in 2025 (up 34% YoY). AI-assisted code leaks at nearly 2x the rate. What DevOps security teams should do now.
Terraform and Azure in the AI Era: Governing Infrastructure That Won't Hold Still
AI experimentation is creating unmanaged Azure resources faster than ops teams can track them. Terraform Query and Sentinel policy-as-code are how teams are bringing order back.
HCP Vault Dedicated Gets Cluster Disaster Recovery — and a DR Testing Path
HashiCorp's HCP Vault Dedicated now supports cluster-level disaster recovery in public preview, enabling failover for cluster-specific incidents and — critically — scheduled DR testing without waiting for a regional outage.
HashiCorp Closes the Terraform-Ansible Gap With pyTFE and Collection 2.0
pyTFE 1.0 and Terraform Ansible Collection 2.0 make it practical to run Terraform workflows from Ansible without glue code — bridging Day 0 provisioning and Day 2 operations natively.
HashiCorp Launches tfctl: A Dedicated CLI for HCP Terraform and Terraform Enterprise
HashiCorp's new tfctl gives platform engineers full API coverage of HCP Terraform and TFE from the command line — with dry-run mode, schema discovery, and built-in guardrails for destructive operations.
HCP Packer: Enforced Provisioners and the End of Governance by Trust
HCP Packer's new enforced provisioners let platform teams mandate compliance steps across all image builds—regardless of which team is building them.
SCIM in HashiCorp Vault: Identity Provisioning Without the Policy Risk
Vault 2.0 SCIM beta lets SailPoint and Okta provision users and groups — with deliberate architectural separation that blocks identity managers from touching Vault policies.
Terraform 1.15: What Dynamic Module Sources Change for Platform Teams
Terraform 1.15 introduces dynamic module sources, variable deprecation, native Windows ARM64 support, and inline type conversion. Here's what each feature unlocks for IaC at scale.
HCP Terraform + Infragraph: A Live Map of Your Entire Cloud Estate
HCP Terraform's Infragraph delivers a live knowledge graph of your multi-cloud estate — unmanaged resources, drift, and ownership visible in one place.
HashiCorp Vault SPIFFE: The Identity Layer Agentic AI Has Been Missing
Vault Enterprise 1.21 now issues SPIFFE identities to AI agents and non-human workloads — giving autonomous systems the cryptographic credentials zero-trust security requires.
HashiCorp Vault SSH: Short-Lived Certificates Replace Static Keys at Scale
HashiCorp Vault's SSH Secrets Engine replaces long-lived static SSH keys with 30-minute certificates signed by an internal CA. How the architecture eliminates four structural risks in enterprise SSH access management.
HashiCorp Vault Radar: Why Finding Secrets Isn't Enough
HashiCorp's Vault Radar reframes secret detection as a remediation problem. Four pillars that shift the security metric from secrets found to secrets resolved per week.
Terraform + AWS Native OIDC: Eliminating Static Credentials From Multi-Account IaC
AWS Account Factory for Terraform now supports native OIDC with a single config flag — no stored secrets, auto-generated IAM roles, and consistent zero-standing-credential provisioning across every account.
HashiCorp HCP Multi-Owner Governance: Scaling Terraform Without the Platform Bottleneck
HashiCorp's HCP governance update separates workspace ownership from policy enforcement — letting platform teams set global controls without owning every workspace.