Case Study: DoorDash speeds up Terraform code reviews with HashiCorp Conftest

Doordash Automated Away Some Mundane Code Review Tasks For Infrastructure Code

DoorDash faced a major bottleneck in Terraform-based infrastructure changes: developers had to wait on repeated security code reviews for even simple updates like AWS security group rules. The case study from HashiCorp highlights how this slowed delivery and created frustration for both developers and the security team.

HashiCorp’s solution used predefined security policies with Conftest to automatically check each pull request for policy violations. If no issues were found, security approval was no longer needed, which significantly sped up infrastructure deployment and gave the security team more time back.

DoorDash

Jay Wallace

Production Engineering