HashiCorp

May 2025

Welcome to HashiBits, our monthly newsletter with the latest and most relevant news about HashiCorp’s products and community.

HCP Vault Radar is now GA. Learn how it discovers leaked secrets and imports them directly into Vault.

FROM THE HASHICORP COMMUNITY

Announcing public preview of Terraform export from the Azure Portal – A new tool from Microsoft can generate Terraform configuration files that accurately represent your Azure resources. by STEVEN JMA

.....

2025 Verizon Data Breach Investigations Report – The annual cybersecurity report from Verizon is now available. Once again, secrets are the common initial access vector for cyberattacks and aren’t being rotated often enough. by VERIZON

.....

Why AI fails without DevOps: What no one tells you – Get an overview of what a realistic, standard infrastructure stack for AI applications looks like. by DEVOPS COMPASS

.....

Packer, Ansible, and Terraform for IaC – Watch this DevOps lab example and see how Packer, Ansible, and Terraform can work together to help you manage your infrastructure as code. by RIAAN NOLAN

.....

Generating 1 million PDFs in 10 minutes – The estimated latency of rendering a PDF is 1 second to 100ms at best. To render 1 million would be a very long and expensive process, but this blog shows how to build a Rust-based PDF generator with a serverless architecture that can perform this job in 10 minutes at a low cost. All deployed in Terraform. by ERIK STEIGER

.....

Building production-ready infrastructure for generative AI applications: A Terraform approach – Generative AI apps are resource-hungry, so building your infrastructure carefully is critical. This blog showcases an architecture for running genAI apps in production and walks through the Terraform code that makes it all possible and repeatable. by FAYAZ KHAN

.....

Practicing Terraform locally without a cloud provider – You don’t need to give a credit card to a cloud vendor just to practice provisioning infrastructure with Terraform. This tutorial walks you through how to do the whole process locally. by MARK BOSIRE

.....

Cybersecurity (anti)patterns: Busywork generators – If you’re not building secure-by-design workflows and addressing root causes, then your security and engineering teams will eventually drown in the deluge of scan results, alerts, and meetings. Learn how the cybersecurity busywork generator anti-pattern happens and how to stop it. by EUGENE LIM

Case study | Redesigning secrets management: Vault at Canva

Find out how Canva ended secret sprawl, saved engineers valuable time, and secured 2 million monthly builds.

FROM HASHICORP

Announcing HCP Terraform Premium: Infrastructure Lifecycle Management at scale – We’re now offering a new plan for HCP Terraform: Premium. Read our announcement to see the additional features Premium provides. by MELAR CHEN

.....

Nomad 1.10 adds dynamic host volumes, extended OIDC support, and more – Nomad 1.10 introduces a new flexible stateful storage provisioning workflow with dynamic host volumes. This includes additional governance capabilities to enforce storage patterns and quotas during storage provisioning. by AUSTIN WORKMAN

.....

Consul 1.21 improves service discovery, Consul on Kubernetes, and supports OpenShift 4.17 – HashiCorp Consul 1.21 simplifies architecture for service discovery of external services, adds support for OpenShift 4.16 and 4.17, and improves features for Consul on Kubernetes. by VAN PHAN

.....

Align your cybersecurity strategy with your organization’s risk appetite – Budgets aren’t unlimited — so how do you decide which cybersecurity risks to mitigate and which ones to accept? Here are some tips on determining your team’s acceptable risks and which risks you should spend money trying to mitigate. by JACKSON CONNELL and MITCH PRONSCHINSKE

.....

Terraform AWS provider tops 4 billion downloads, 6.0 now in public beta – See what’s new in the Terraform AWS provider, which now has over 4 billion downloads. by MITCHELL ROSS and MARC JOSEPH COSENTINO

.....

AWS and AWSCC Terraform providers: Better together – Learn how to use the AWS and AWSCC Terraform providers together and how to migrate between the two. by GLENN CHIA JIN WEE

.....

In security, when do you hire more people vs. add more automation? – This guide helps you understand when to invest in automation tools to strengthen and scale your security posture versus hiring more people. by JACKSON CONNELL and MITCH PRONSCHINSKE

.....