1:43 · Recorded with OBS · Click to play with sound, use native controls to go fullscreen
A live Cloudflare Zero Trust access-control change, planned and applied through Terraform — recorded end to end, before, during, and after.
1:43 · Recorded with OBS · Click to play with sound, use native controls to go fullscreen
I originally built the Take Flight Ops Zero Trust environment directly in Cloudflare — role-based access to internal Inventory and Purchase Order applications. To extend it into Infrastructure as Code, I imported the existing Access applications and policies into Terraform, verifying my configuration matched the live environment before making any changes.
I then used Terraform to promote a test employee from Inventory-only to Inventory + Purchase Order access — reviewing the generated plan, saving that plan, and applying it before validating the resulting access change.
This is a small, deliberately simple demo so the mechanics stay fully visible. At enterprise scale, individual access changes like this are typically handled through identity provider groups (e.g., Okta, Google Workspace) rather than editing email lists in code — that keeps access in sync as people join, leave, or change roles. Terraform's real value at that scale is managing the underlying infrastructure and policy configuration as version-controlled, reviewable code — the same plan/apply discipline shown here, just pointed at policy and infrastructure definitions instead of individual users.