How Cloudflare uses Terraform to manage Cloudflare

This post details Cloudflare's internal adoption and best practices for using the Cloudflare Terraform provider to manage its own account configurations. It highlights the benefits of code-driven management for security, auditability, and self-service, including the use of CI/CD pipelines (Atlantis), a monorepo structure for managing multiple accounts, encrypted state management, daily automated applies for drift detection and certificate rotation, and the introduction of API/Terraform read-only mode for Zero Trust configurations to enforce a single source of truth.