TLDR Tech / DevOps
Securing Infrastructure at Scale: Introducing Pinterest's Resource Provisioner Pipeline
Pinterest's Resource Provisioner Pipeline centralizes Terraform execution across hundreds of workspaces and tens of thousands of AWS resources while preserving team ownership in a multi-repository environment. It enforces least privilege through GitHub OIDC, strict repository-path-to-workspace mappings, backend validation, down-scoped IAM roles, mandatory review, and explicit apply commands, while centralization enables consistent auditing, security scanning, and company-wide fixes.
Read the full story