Using Terraform to manage 100+ AWS Accounts

Mon, 30 Oct 2023 14:57:06 +0000

The Issue

While browsing /r/terraform the other day, I stumbled upon a post from someon asking how to use Terraform to manage AWS multi-account deployments at scale. The actual question (copied here in case it goes away) was:

Say you have 500 AWS accounts and you need to provision and update their landing zone infrastructure (VPC, logging, IAM, etc.) using Terraform. How would you do it so that changes are deployed parallel to the accounts to speed up deployments? There would need to be one central deployment account which assumes a trust role in target accounts and has account spesific state files in central S3 as well.

Terraform on ImDevinC

Using Terraform to manage 100+ AWS Accounts

The Issue