01
Developer workstation
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Terraform Academy · Architecture Gallery
Secure CI/CD Architecture
Map source, runners, artifacts, approvals, identity federation and deployment targets.
Objective: Reduce software supply-chain risk.
Practical guidance
Trust boundaries
02
Source control
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Build runner
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
04
Artifact store
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
05
Production target
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Controls
01
Signed commits and artifacts
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
OIDC federation
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Protected environments
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
04
Dependency scanning
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Audit evidence
01
Review record
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Build provenance
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Approval history
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
04
Deployment digest
Apply this point to a real Terraform Academy design, delivery or operational scenario and record the evidence used to validate the outcome.