No-Code / Low-Code
For an audience that desires to use Infrastructure-as-Code (IaC) we have an SDK or a "Provider" into Terraform that enables low-code IaC. This provider exposes all the DuploCloud abstractions and constructs to be programmed via Terraform. Using the DuploCloud Terraform provider, one can build the same infrastructure using 10x less code with all compliance controls built-in. The user is not required to have subject matter expertise in DevSecOps. This white-paper describes the process in detail.
The reason DuploCloud uses APIs behind the scenes is that this is not just about taking user requests and generating configurations synchronously and calling the cloud provider. Such a system requires many operations to be done asynchronously, requiring a state machine with retries and the ability to detect and fix configuration drift continuously. Further, faults and compliance controls must be monitored continuously. Terraform or for that matter any scripting approach are meant to be run with human supervision. There is no synchronicity and retries. A script start and ends.