Terraform in CI
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
run Terraform from a pipeline with reviewable plans.
Planned topics
- On a pull request:
fmt,validate,plan, post the plan as a comment. - On merge to main:
applythe reviewed plan, with approval for production. - Pipeline identity uses short-lived credentials with least privilege.
- Add policy checks and security scanning (for example tfsec or Checkov; verify tool before recording).
- Forbid console changes; any manual change is drift.
Draft outline details
Demonstration
pipeline stages: fmt/validate → plan (comment on PR) → approval → apply.
Check your understanding
Why post the plan on the pull request?
Show answer
Reviewers see exactly what will change before it happens.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.