Terraforming Cloudflare: in quest of the optimal setup
Oct 9, 2019Guest Author

Summary
This post introduces the adoption of infrastructure-as-code (IaC) practices using Terraform and Terragrunt to manage Cloudflare configurations. It details the journey of implementing a modular and declarative approach for managing various Cloudflare resources like access rules, zone settings, account members, and rate limits across multiple domains and environments. The post highlights different strategies for resource implementation (static, parameterized, dynamic) and the benefits of using modules for code reusability and maintainability, thereby enhancing the overall management and consistency of Cloudflare's security setup.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack