Developer Self-Service

Enable developers to provision infrastructure through Git workflows. Automated policies ensure security while eliminating bottlenecks.

Self-service with guardrails

Developers get autonomy, platform teams maintain control

Git Workflows

Infrastructure through familiar PRs

  • Standard PR process
  • Code reviews
  • Version control

Automated Runs

Plans and applies run automatically

  • Auto-plan on PR
  • Comment commands
  • Parallel execution

Policy Controls

Automated guardrails prevent issues

  • OPA policies
  • Cost controls
  • Security scans

Access Control

Team-based permissions

  • GitHub/GitLab teams
  • Env restrictions
  • Apply requirements

Multi-Environment

Manage all environments from Git

  • Workspace isolation
  • Env promotion
  • Bulk operations

Drift Detection

Keep infrastructure in sync

  • Scheduled checks
  • Auto-remediation
  • Notifications

See self-service in action

Watch how developers provision infrastructure through PR workflows

Add staging database for new microservice #324
AD
alice-dev opened this PR
Adding RDS instance for the new user service. This includes: - PostgreSQL 14.7 database - Encrypted storage - Private subnet configuration
# environments/staging/rds.tf
resource "aws_db_instance" "app_db" {
identifier = "staging-user-service"
engine = "postgres"
instance_class = "db.t3.small"
allocated_storage = 20
storage_encrypted = true
}
TT
terrateam commented
📋 Plan Results for staging
+ aws_db_instance.app_db
+ aws_db_subnet_group.app_db
+ aws_security_group.app_db
+ aws_security_group_rule.app_db_ingress
✅ Security
All checks passed
💰 Cost
+$25.55/month
🔒 Policies
Compliant
💡 Ready to apply? Comment terrateam apply
backend-lead approved these changes
LGTM! Go ahead and provision the database.
AD
alice-dev commented
terrateam apply
TT
terrateam commented
Apply complete!
Resources: 4 added, 0 changed, 0 destroyed
Outputs:
database_endpoint = "staging-user-service.c9ak...amazonaws.com"
database_port = 5432
🎉 Infrastructure deployed! Auto-merging PR...

Common self-service scenarios

Provision databases

# Developer creates PR with:
resource "aws_rds_instance" "service" {
engine = "postgres"
# Policies enforce:
# - Encryption required
# - Approved instance types
# - Backup configuration
}

Scale resources

# Update instance size via PR:
resource "aws_instance" "app" {
- instance_type = "t3.small"
+ instance_type = "t3.large"
# Terrateam shows:
# - Cost increase: +$45/mo
# - Requires team approval
}

Self-service with safety

Minutes

Not days

Automated

Policy checks

Git-based

Familiar workflow

Team

Collaboration

Ready to enable developer self-service?

Give developers autonomy while maintaining platform control