Mehdi Laruelle

I am a Platform Engineer and SRE. For ten years I have been building and running the platforms other engineers deploy on, mostly on AWS, with Terraform, HashiCorp Vault and Kubernetes. The subject I keep coming back to is secrets management: where to store secrets, how to distribute them and how to move them through a CI/CD pipeline without leaving them in plain text somewhere.

I believe technical knowledge should stay free and available to everyone, in French as much as in English. That is why I teach, why I speak at conferences, and why I write here in both languages.

I have been an AWS Authorized Instructor for six years, was a HashiCorp Ambassador from 2020 to 2025 and an AWS Community Builder in 2024.

The articles worth starting with:

• HashiCorp Vault authentication methods and how to choose one
• Terraform on AWS with GitLab CI and Vault: dynamic credentials
• Migrating an application’s secrets into Vault, in three steps
• Deploying a Hugo site on AWS with Terraform and CloudFront
• AWS IAM Identity Center with Auth0, for free

Everything else is on the blog and there is a bit more about me on the about page. Meme lover too, but that one sits less well on a CV.