War stories, IaC opinions, post-mortems, and the lessons that only seem obvious after production makes them expensive.
A persistence-by-alias pattern that hides in plain sight in the Google Workspace admin console, and the Admin SDK Apps Script that cleaned it up in under a minute.
A field guide to the environment-isolation failures that show up six months into a Terraform rollout, from shared secrets to DNS drift.
Pulumi, CDK, Ansible, plain shell — and the project shapes where Terraform is actually the wrong pick. A working taxonomy for picking the right IaC tool.