Infrastructure as code (IaC) makes cloud configuration reviewable, repeatable and testable. It also makes a single pull request very powerful.
Declarative, not click-by-click
You describe the desired end state:
resource "aws_s3_bucket" "logs" {
bucket = "example-logs"
}
The tool plans the difference and applies it. The plan is the review artefact: it shows what will be created, changed or destroyed.
Review the plan
Look for:
- deletions of stateful resources (databases, buckets);
- public exposure;
- IAM changes;
- security group changes;
- logging disabled;
- resources moving to a new region.
A plan that says "0 to change" is not automatically safe; it may mean the code is not managing the resource you think it is.
Continue this lesson in the player
A free account unlocks the full lesson, the five-question knowledge check, progress tracking, notes and the completion certificate.