Automating Cloudflare Zero Trust at Scale: Terraform, Multi-Cloud, and Identity (Part 2)
Introduction In Part 1 , we demonstrated how Terraform can streamline reproducible security configurations. In this follow-up, I’ll show how to extend those principles across AWS, Azure, and GCP using Cloudflare Zero Trust. You’ll see how the project’s modular structure, automation, and dynamic routing reduce manual security tasks by up to 80%—based on my own benchmarks. What’s new since Part 1: Custom subnets and improved network segmentation Automated device profiles and dynamic WARP routing Expanded multi-cloud support with updated diagrams Terraform code is now 4100+ lines of code, 87 files and 21 directories (even if the quantity does not mean quality!) with 143 resources Let’s dive into the updated architecture and key modules powering this environment. ...