I will do a professional terraform code audit for aws
About this Gig
Senior DevOps/SRE auditing your Terraform for security, cost, and production-readiness.
I'm a HashiCorp Certified Terraform Associate (003) with AWS Solutions Architect + Developer certifications and 7+ years running production AWS infrastructure. I audit Terraform codebases that run real workloads not toy examples.
What you get:
- Line-by-line review of your Terraform code
- Prioritized findings (critical / high / medium / low)
- Security: IAM over-permissions, exposed state, unencrypted resources, public endpoints
- Cost: right-sizing, orphan resources, wasteful patterns
- Best practices: state management, drift risk, module hygiene, lifecycle gotchas
- Specific line references and concrete fixes
Why me:
I've shipped Terraform across EKS, RDS, Lambda, VPC, IAM, and CI/CD pipelines (GitLab, GitHub Actions, Octopus) in production SaaS. Real production experience - I know what breaks at scale and what auditors flag.
Before ordering: please message me with approximate line count and the AWS services in scope so I can confirm fit and timing. Rush delivery is available.
Standard is the best fit for most buyers. Premium adds a prioritized remediation roadmap and a 30-min walkthrough call.
Tools:
GitLab
•
Cloud Formation
•
Other
Framework:
Terraform
•
Ansible
Cloud Provider:
Amazon Web Services
Programming language:
Bash
•
Python
Expertise:
Debugging
•
Development
•
Configuration
FAQ
What do I need to send you to get started?
A zipped copy of your Terraform files (.tf, .tfvars, terraform.tfstate is optional — I don't need credentials). You can share via GitHub, GitLab, or any file-sharing link. If you prefer private repo access, I'll provide a read-only account.
Will you need access to my AWS account?
No. I audit the code itself, which is enough to find security, cost, and best-practice issues. If you want runtime verification against live infrastructure, that's a custom add-on — message me first.
What if my codebase is larger than the package limit?
Message me before ordering with your line count and I'll send a custom offer. Larger codebases are welcome — I'd rather scope it correctly up front than rush at the end.
Can you also fix the issues, not just identify them?
Yes — remediation work is a separate engagement. The audit gives you a prioritized list; if you want me to implement the fixes, we can discuss a follow-up custom offer once the audit is complete.
Can you sign an NDA before reviewing my code?
Yes. Send your standard NDA when you message me and I'll sign before you share any code. I treat all client code as confidential by default.

