DevOps & CI/CD

Terraform State Locking with S3 and DynamoDB

DevOps & CI/CD diagram · made in Skemio

Architecture diagram showing CI/CD pipeline and Developer acquiring locks in DynamoDB before reading or writing terraform.tfstate in AWS S3.
Architecture diagram showing CI/CD pipeline and Developer acquiring locks in DynamoDB before reading or writing terraform.tfstate in AWS S3.
Open it in SkemioMake your own

What it shows

  • DynamoDB provides strong consistency via conditional writes for mutex locks
  • S3 stores encrypted state versions with object-level integrity checks
  • Failed runs can hold locks; force-unlock requires manual intervention

The takeaway

Always pair remote S3 state storage with DynamoDB mutex locking to eliminate race conditions.

More devops & ci/cd diagrams