CloudFormation vs. Terraform: An Engineer's Experience Migrating AWS IaC | Annem Sabah Shah
Source: YouTube · Cloud Security Podcast · published Oct 23, 2025 · 26:05
The video discusses the pitfalls of over-reliance on AI for critical thinking and the technical challenges of managing cloud infrastructure, specifically contrasting Terraform with CloudFormation.
Key Takeaways:
• Over-reliance on AI can degrade essential quick-thinking skills needed for high-stakes scenarios like firefighting or engineering emergencies 0:00-0:14.
• The speaker critiques AWS CloudFormation for its complex, nested JSON structure, arguing it fails to accurately represent real-world infrastructure 0:17-0:31.
• A major issue addressed is the unwieldy nature of monolithic repositories containing multiple CloudFormation templates 0:32-0:39.
• The transcript highlights the introduction of the Terraform import command, which allows resources to be defined in code with explicit import statements 0:39-0:46.
Maintaining human judgment is vital in crisis situations, while modernizing infrastructure code requires tools that offer clarity and manageable state management.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I think it takes away from critical thinking skills that help you when it comes to quick thinking, firefighting, engineering. [music] When things hit the van, then you need to have quick thinking skills and quick judgment. I would say don't rely on AI too much. >> Why the move? Why not just remain cloud native? >> Personally, I don't think cloudformation is written extremely well. It's written in a kind of JSON low-level programming language in a nested way. And often I don't think it reflects what actual infrastructure looks like. What would it have looked like without the terraform pieces? >> We just had this really big unwieldy repo and that had lots of multiple cloud formation. The new feature was the terapform import [music] command was in line in code. You would have a resource block…