Terraform · Infrastructure change review
Terraform Pull Request Checklist
A review template for Terraform plans, provider changes, state impact, identity boundaries, destructive operations and rollback evidence.
How to use this template
1
Attach the plan produced from the target workspace and commit.
2
Explain every replacement or deletion in the review.
3
Re-plan immediately before apply if upstream state can change.
Copyable template
# Terraform change review ## Scope - [ ] Target account, subscription, project and region are explicit - [ ] Workspace and state backend are correct - [ ] Terraform and provider version changes are intentional - [ ] Generated plan corresponds to the reviewed commit ## Plan review - [ ] Create, update, replace and delete counts are recorded - [ ] Every replacement and deletion has an impact explanation - [ ] Sensitive values are not exposed in plan output or logs - [ ] Unknown values and apply-time dependencies are understood ## Security and reliability - [ ] Execution role has only the permissions required for this change - [ ] Public exposure, IAM, encryption and logging changes are reviewed - [ ] Availability-zone and failure-domain effects are considered - [ ] Lifecycle ignores and prevent_destroy settings remain justified ## Delivery - [ ] Dependencies and sequencing are documented - [ ] Rollback or forward-fix path is viable - [ ] Post-apply checks identify successful convergence - [ ] Drift and a final no-change plan will be reviewed
Related KBY resources
Engineering signal
Follow Terraform failures and fixes
One useful weekly email with new error references, tools, integration notes and production lessons. No daily noise.