What problem does it solve?
IaC Review provides a structured, repeatable analysis of infrastructure-as-code across Terraform, Pulumi, and CloudFormation, ensuring proper state handling, module contracts, plan validation, drift detection, security checks, and cost visibility.
Core Features & Use Cases
- State management review: validates remote backends, locking, encryption, versioning, and per-env isolation.
- Module contract and plan review: ensures explicit inputs/outputs, provider versions, and stable module sources; enforces plan-based validation and drift checks.
- Security and cost auditing: runs tfsec/checkov/OPA assessments and reports Infracost delta to guide cost optimization.
- Use cases include PR reviews for IaC changes, state migrations, multi-env refactors, and incident triage across cloud resources.
Quick Start
Run an IaC review against your Terraform, Pulumi, or CloudFormation project to generate a structured assessment.