Terraform في CI

في هذا الدرس

run Terraform from a pipeline with reviewable plans.

الموضوعات المخطط لها

• On a pull request: fmt, validate, plan, post the plan as a comment.
• On merge to main: apply the reviewed plan, with approval for production.
• Pipeline identity uses short-lived credentials with least privilege.
• Add policy checks and security scanning (for example tfsec or Checkov; verify tool before recording).
• Forbid console changes; any manual change is drift.