Managing infrastructure across hybrid and multi-cloud environments requires seamless coordination between provisioning, configuration management, and security. Organizations often struggle with fragmented workflows when Day 2 operations require switching between different tools and platforms.

This session demonstrates how to unify your infrastructure automation workflow using Terraform actions, a feature that brings Day 2 operations directly into Terraform. You'll see how to orchestrate end-to-end VM lifecycle management by combining Terraform for provisioning with Ansible Automation Platform for configuration, all within a single, codified workflow.

We'll walk through a practical implementation that:

1. Provisions virtual machines using Terraform
2. Automatically registers newly created VMs as hosts in Ansible Automation Platform
3. Triggers AAP job templates using the aap_job_launch action to configure VMs immediately after creation
4. Eliminates manual handoffs between infrastructure and configuration teams

We'll also explore an integration pattern using HashiCorp Vault's SSH secrets engine to replace static SSH keys with short-lived, signed certificates that Ansible Automation Platform uses to access target VMs securely.

Attendees will lean how to

1. Write Terraform code with action triggers that respond to resource lifecycle events
2. Configure the AAP provider and aap_job_launch action with parameters like wait_for_completion
3. Set up Vault's SSH CA to sign certificates for AAP authentication
4. Automate the entire stack—from VM creation to fully configured, securely accessible infrastructure

This integrated approach reduces operational overhead, eliminates credential sprawl, improves audit visibility, and provides a single source of truth for infrastructure operations that scales from dozens to thousands of VMs.