The original title is "Why Snap CD: Self-Hosted Terraform Runners with Credential Isolation"

Short summary

Shared CI runners managing Terraform across multiple environments create credential and security risks—every job can access all cloud credentials. Snap CD separates planning (server) from execution (isolated runners), letting each runner have only the credentials it needs. This reduces blast radius, improves audit trails, and scales better than separate CI projects or Vault-only approaches.

• •Shared CI runners for Terraform pose credential scope and audit risks
• •Snap CD decouples orchestration from execution with isolated, credential-scoped runners
• •Scales better than managing separate CI projects or complex Vault policies

Generated with AI, which can make mistakes.