Using pusher's service

I came across pusher.com and was wondering if I could use pusher’s service to send data from my server executing terraform apply -json to the browser rather than writing code for running django channels daphne.

I mean - does Terraform apply output any confidential data that I shouldn’t be sending to a 3rd party service ?

Difficult to conclusively answer, because:

  • What you consider confidential may vary considerably, depending on how much insight into internal infrastructure configuration you consider confidential

  • Although terraform apply output is less likely to contain actual secrets, you probably implicitly want to show terraform plan output too, which has more potential to contain secrets

  • Whether or not the output contains actual secret credentials depends to some extent on what users write in the Terraform configuration

All of this makes this an “attitude to risk” question, rather than one with a single yes/no answer.

1 Like