December 2024 Summaries

HashiCorp's 2024 year in review highlights the company's significant progress and achievements in various product areas, including Terraform, Packer, Waypoint, Nomad, Vagrant, Vault, Boundary, and Consul. The company has expanded its offerings to support hybrid and multi-cloud environments, improved workflows for security and infrastructure management, and introduced new features such as Terraform Stacks, module lifecycle management, and provider-defined functions. HashiCorp has also strengthened its partnerships with IBM, AWS, and other companies, and has seen notable success stories from customers like Canva, California's Department of Health Care Services, and BT Group. Looking forward, the company is focused on continuing its whole-lifecycle approach to infrastructure and security management, cross-product integration, and community engagement.

HashiCorp Ambassador program recognizes individuals for knowledge sharing, mentorship, and kindness in the community, with a call for submissions now open. The program aims to build a welcoming community and ecosystem around HashiCorp tools, fostering learning and collaboration. To be considered as a HashiCorp Ambassador, one must have been active in 2024, share knowledge about HashiCorp tools through content creation or events, and adhere to the HashiCorp Principles. Nominations and applications can now be submitted until January 31, 2025, with reviews expected in early February.

HashiCorp has introduced three new integrations for its Vault ecosystem, strengthening customer security in multi-cloud environments. The integrations include HCP Vault Secrets, which automatically rotates MongoDB Atlas usernames and passwords, and a new integration with Private Machines to provide hardware-backed, FIPS-compliant security. Additionally, walt.id has released an ID wallet and Vault integration that enables seamless user experiences and control over data. These integrations aim to simplify customer workflows and management while enhancing overall security posture.

Terraform has expanded its integrations with 9 partners, including Crowdstrike, Datadog, JFrog, and Red Hat, providing more automation and security options for cloud infrastructure management. The HashiCorp Infrastructure Lifecycle Management ecosystem continues to grow, offering additional capabilities to users of HCP Terraform, Terraform Enterprise, and Community Edition. New integrations include a Datadog integration that enables collection of audit trail log data, an Overmind integration that provides real-time impact analysis on Terraform changes, and three new JFrog providers that simplify the setup and management of the Falcon platform. Additionally, Terraform Enterprise now offers support for deploying on Red Hat OpenShift clusters, and nine new verified Terraform providers have been added to the ecosystem, including Aembit, CrowdStrike, Fortinet, jFrog, Netlify, VergeIO, among others.

Many organizations struggle with tool sprawl, which leads to security vulnerabilities, compliance challenges, and increased stress between Dev and Sec teams. To address this issue, it's essential to standardize workflow processes and leverage modern tools that provide guardrails for better software delivery practices. A platform-based approach can help streamline security and development workflows by providing consistent tooling, automation, and APIs, while reducing the need for manual reviews and ensuring security best practices are in place. By consolidating tools and adopting a centralized platform, organizations can improve developer experience, enhance productivity, and ultimately reduce operational complexity.

Terraform has introduced launch-day support for Amazon S3 Tables, EKS Hybrid Nodes, and more in its AWS provider plugin. The new features include S3 Tables, Amazon S3 Express One Zone, ECS VPC Lattice, ECS Service AZ rebalancing, EKS Hybrid Nodes, and EKS Auto Mode. Additionally, the AWS Cloud Control API provider has been launched to bring new services to HashiCorp Terraform faster. The provider is automatically generated based on the AWS Cloud Control API, allowing for quick support of new features and services.

At AWS re:Invent 2024, HashiCorp highlights its security portfolio and collaboration with Amazon Web Services (AWS). Major updates include dynamic secrets for HCP Vault Secrets, auto-rotation of secrets in HCP Vault Secrets, secrets sync between HashiCorp Vault and AWS Secrets Manager, scanning secrets in AWS infrastructure using Vault Radar, and SSH session recording storage on Amazon S3. These features aim to enhance security management playbooks for organizations transitioning to the cloud.

At AWS re:Invent 2024, HashiCorp highlighted its infrastructure news and developments on AWS from the past year. Key highlights include reaching three billion downloads of the Terraform AWS provider, launching the AWS Cloud Control provider, offering pre-written Sentinel policies for AWS, introducing provider-defined functions in the AWS provider, and supporting AppFabric with Terraform. These developments aim to simplify infrastructure provisioning, management, and security on AWS.

HashiCorp has introduced a new pre-written policy library co-developed with AWS to reduce the barrier of adoption for policy as code infrastructure workflows. The company has released pre-written Sentinel policy sets for AWS, available in the Terraform registry and co-created by HashiCorp and AWS. These policies are written specifically for AWS services in compliance with the Center for Internet Security (CIS) and cover a wide range of use cases, including security, compliance, and operational efficiency. The pre-written policy sets help organizations enforce CIS AWS Foundation Benchmarks v1.2, v1.4, and v3.0, supporting various services such as EC2, KMS, Cloudtrail, S3, IAM, VPC, RDS, and EFS.