# Terraform change review

## Scope
- [ ] Target account, subscription, project and region are explicit
- [ ] Workspace and state backend are correct
- [ ] Terraform and provider version changes are intentional
- [ ] Generated plan corresponds to the reviewed commit

## Plan review
- [ ] Create, update, replace and delete counts are recorded
- [ ] Every replacement and deletion has an impact explanation
- [ ] Sensitive values are not exposed in plan output or logs
- [ ] Unknown values and apply-time dependencies are understood

## Security and reliability
- [ ] Execution role has only the permissions required for this change
- [ ] Public exposure, IAM, encryption and logging changes are reviewed
- [ ] Availability-zone and failure-domain effects are considered
- [ ] Lifecycle ignores and prevent_destroy settings remain justified

## Delivery
- [ ] Dependencies and sequencing are documented
- [ ] Rollback or forward-fix path is viable
- [ ] Post-apply checks identify successful convergence
- [ ] Drift and a final no-change plan will be reviewed