- CI/CD
- Continuous integration and delivery; the pipeline that builds, tests and deploys code.
- IaC
- Infrastructure as code; defining cloud resources in files such as Terraform, OpenTofu or Pulumi.
- Platform engineering
- A team that builds paved roads and self-service tooling for other developers.
- Golden path
- The supported, opinionated way to build and ship a service.
- IDP
- Internal developer platform or portal, often built on Backstage.
- DORA metrics
- Deploy frequency, lead time, change failure rate and time to restore.
- Toil
- Repetitive manual work that adds no lasting value.
- Drift
- When live infrastructure no longer matches what is in code.
- Shift left
- Catching security and quality issues earlier in the pipeline.
- SBOM
- Software bill of materials; a list of components in a build.
- Runner
- The compute that executes pipeline jobs, hosted or self-managed.
- Monorepo
- One repository holding many services or projects.
- On-call
- The rotation of engineers who respond to incidents.
- Blast radius
- How much breaks when a change goes wrong.
- How do you handle Terraform state?
- Terraform keeps a file that records what it built. That file is the state.
- What about state locking?
- A lock that stops two people changing the same infrastructure at the same time.
- How do you deal with drift?
- Drift means the live cloud no longer matches what the code says.
- Which remote backends do you support?
- The place the state file is stored, like an S3 bucket, instead of a laptop.
- How do you handle a multi-account setup?
- Running many separate cloud accounts, for example one per team or environment, instead of one big one.
- Do you build landing zones?
- The starting setup of a cloud: accounts, network, access and security rules, ready for teams to use.
- Do you support OIDC?
- A standard way to prove who someone (or a pipeline) is, without sharing passwords or long-lived keys.
- How do you handle least privilege?
- Give each person or tool only the access it needs, nothing more.
- Do you support SCIM?
- Automatic adding and removing of user accounts from the company directory, like Okta or Entra ID.
- What is the blast radius if something goes wrong?
- How much breaks if one thing fails or one mistake is made.
- Do you support golden paths?
- A ready-made, approved way for developers to build and ship, so they do not start from scratch.
- Can we enforce policy as code?
- Rules written as code that run automatically to block changes that break them.