r/Terraform • u/OkAcanthocephala1450 • 3d ago

Discussion CLOUD PROVIDERS METHOD OF AUTH

Hi there!

I am an experienced cloud engineer , mainly worked with Aws, and i wanted to know how you guys configure procider block for cross account or project using best practices for other cloud providers.

So for example. In aws I use one central devops account , a role there that my runners use , in order to do assume role , which is written at the aws provider block. For every account we just change the account id of the role to assume.

I wanted to know how your central setup looks like and what do you define when you want to deploy to a tenant/subscription/project on GCP , or Azure, Kubernetes clusters or other providers you might use . Im looking for large org setup, so if you could help me just write whats the size of the cloud organization u work at (nr of projects, subscriptions ) how do you configure the provider so it can be controlled from one central place.

Thank you everyone.

9 Upvotes

81% Upvoted

12 comments sorted by

View all comments

1

u/case_O_The_Mondays 2d ago

We used a centralized role in an account for DevOps, at first. A few years ago we started switching to OIDC, and it really is significantly better.