Operations | Monitoring | ITSM | DevOps | Cloud

Custom flows can run anything a repo puts in front of them. This week you decide which ones your organization accepts. Everything that shipped in env zero from v4.0.287 to v4.0.298, plus self-hosted agent 5.5.10 and 5.5.11. In this week's release: New EZ Release Weekly every Friday.

If you pull deployment history out of env zero over the API, that endpoint was cutting its response at 5 MiB without telling you. It streams now, so this week opens there.

env zero now connects to Azure DevOps through Microsoft Entra ID, Pulumi runs take your own CLI flags, and Terraform Cloud migrations got smoother. Here's what shipped this week. In this episode.

Self-hosted deployments could hang on save and die at the timeout with no error. Fixed in v5.5.6, plus an autoscaling fix and a batch of agent reliability work. This week in env zero (Oct 5–9, 2026): Self-hosted agent v5.5.6.

EZ Control brings env zero and CloudQuery together in one product. It discovers nearly 2,300 resource types across AWS, Azure, Google Cloud and Kubernetes, links each one to its code, owner, cost and policies, and closes the gap when what's running drifts from what you intended: drift, security, cost and availability, all under your policies. You choose how much it does, from observe-only to autonomous, with a full audit trail. The same guardrails govern AI agents.

Turn manually-created cloud resources into Infrastructure as Code, then package that code into reusable templates your whole team can deploy. This walkthrough covers two env zero capabilities that work well together: using Cloud Compass to codify click ops resources into Terraform or OpenTofu, and building reusable templates so other users can deploy proven infrastructure without writing code or configuring integrations themselves.

See how env zero discovers and manages every cloud resource across AWS, Azure, and GCP—including resources deployed outside of Infrastructure as Code. In this overview, we walk through env zero's cloud resource discovery and environment migration capabilities. You'll see how the Cloud Compass dashboard maps your entire resource estate, how to tell whether a resource was created by IaC, click ops, or an API call, and how to bring existing Terraform workspaces and VCS repositories into env0 in bulk.

How env zero turns Infrastructure as Code into true self-service—developers deploy pre-approved infrastructure in a few clicks, and multi-step workflows handle the complex stuff automatically. This walkthrough shows what happens once discovery, codification, and governance are in place: developers pull from a catalog of approved resources without filing tickets or writing Terraform, and platform teams keep their guardrails intact. We also cover workflows, which chain multiple deployments into a single run.

How env zero keeps Infrastructure as Code under control at scale — custom roles and permissions, Policy as Code guardrails, and automated drift detection with remediation. This walkthrough covers env zero's governance features: building granular custom roles for your teams, enforcing policy guardrails that stop bad configurations before they deploy, and catching infrastructure drift the moment someone changes something outside the platform.

"Show me all EC2 instances that are public." One question. About 10 minutes. Manually, the same answer is a 10-day job. In this clip, the CloudQuery AI assistant works it out live: it finds the EC2 instances table, reads the schema, identifies public_ip_address as the field that signals public exposure, and queries for every instance that has one. It comes back with 2 running public EC2 instances — instance type, public IP and DNS, private IP, VPC, subnet and tags for each — and flags that both are reachable from the internet, subject to security group rules.