Encrypting State With OpenTofu

OpenTofu introduce state and plan encryption with version 1.7. Now you can use one of several key sources and methods to encrypt the sensitive information stored in state data and plan files. How does it work? How do you migrate existing state? And what do you need to be aware of? That's what we'll cover in the video.
🌮 Why should you encrypt state and plan
🌮 How the encryption feature works
🌮 How to encrypt existing state data
Here are the links for everything I mentioned:
🔗 OpenTofu Encryption Docs: opentofu.org/docs/language/st...
🔗 Encryption Issue for Terraform: github.com/hashicorp/terrafor...
Thank you so much for watching! Subscribe if you think I’ve earned it. Hit the bell as well if you’re feeling swell.❤️&🌮
✅🔔 Subscribe ► nedinthecloud.com/SubscribeYT
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
🌮 Other videos to check out:
📽️ Terraform Basics - Modules: • Terraform Basics: Modules
📽️ Managing Multiple Environments with Terraform: • Managing Multiple Envi...
📽️ Workload Identity with Terraform Cloud: • Using Workload Identit...
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
🌮 Timestamps:
⌚ 0:00 Intro
⌚ 1:05 Why Encrypt At All?
⌚ 3:01 Encryption Options
⌚ 5:26 Encryption With OpenTofu
⌚ 8:17 Basic Example With Passphrase
⌚ 11:49 Migration Example With AWS KMS
⌚ 16:13 Precautions and Warnings
⌚ 18:31 Final thoughts
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
#terraform #hashicorp #devops #cloudengineer #azure #opentofu
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
⭐ CONNECT WITH ME 🏃🦖
🌐 Day Two Cloud: daytwocloud.io
🌐 Chaos Lever: chaoslever.com
🌐 Visit my Website ► nedinthecloud.com
🗳 Pluralsight ► app.pluralsight.com/profile/a...
🐙 Find the code at GitHub► github.com/ned1313
🐧 Twitter ► / ned1313
👨‍💼 LinkedIn► / ned-bellavance
For collaboration or any queries: [e-mail]
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
🌮 About Me 🌮
Ned is a curious human with a knack for creating entertaining and informative content. With over 20 years in the industry, Ned brings real-world experience to all his creative endeavours, whether that's pontificating on a podcast, delivering live instruction, writing certification guides, or producing technical training videos. He has been a helpdesk operator, systems administrator, cloud architect, and product manager. In his newest incarnation, Ned is the Founder of Ned in the Cloud LLC. As a one-man-tech juggernaut, he develops courses for Pluralsight, runs two podcasts (Day Two Cloud and Chaos Lever, and creates original content for technology vendors.
Ned has been a Microsoft MVP since 2017 and a HashiCorp Ambassador since 2020, and he holds a bunch of industry certifications that have no bearing on anything beyond his exceptional ability to take exams and pass them. When not in front of the camera, keyboard, and microphone, you can find Ned running the scenic trails of Pennsylvania or rocking out to live music in his hometown of Philadelphia. Ned has three guiding principles: Embrace discomfort, Fail often, and Be kind.

[@cokegen]

good info and perfectly presented !

[@bobalbion1289]

I wonder who PRIMEd this feature to be included so soon after fork.

[@NedintheCloud]

If you're wondering whether this video was sponsored, it was not. I was curious how the state encryption feature worked and thought I would dive in and test it out.