terraform-azurerm-set-diff-analyzer

Analyze Terraform plan JSON to filter order-only Set-type diffs.

Updated Nov 21, 2025
One-click install
npx skills add https://github.com/lluppesms/dadabase.demo --skill terraform-azurerm-set-diff-analyzer-lluppesms
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: terraform-azurerm-set-diff-analyzer
Source: https://github.com/lluppesms/dadabase.demo/tree/main/.github/skills/terraform-azurerm-set-diff-analyzer
Command: npx skills add https://github.com/lluppesms/dadabase.demo --skill terraform-azurerm-set-diff-analyzer-lluppesms

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you distinguish between actual changes and "false-positive diffs" in Terraform plans caused by the ordering of elements within AzureRM Set-type attributes, making plan reviews much cleaner.

Core Features & Use Cases

  • Identify False Positives: Automatically filters out changes that are merely due to the order of elements in Set attributes (like security_rule in NSGs or backend_address_pool in App Gateways) not changing.
  • Focus on Real Changes: Highlights only the actual additions, removals, or modifications within Set attributes, or actual resource replacements.
  • Use Case: When terraform plan shows dozens of changes for an Application Gateway, but you only added one backend server, this Skill will tell you that only one element was truly affected, not the entire Set.

Quick Start

Analyze the terraform plan JSON file named 'plan.json' using the default markdown output format.

Frequently Asked Questions about terraform-azurerm-set-diff-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I filter false-positive Terraform plan diffs caused by AzureRM Set attribute ordering?

To filter false-positive Terraform plan diffs caused by AzureRM Set attribute ordering, analyze your plan JSON output to distinguish between order-only changes in Set-type attributes and actual resource modifications. This highlights only real additions, removals, or replacements.

Why does my Terraform plan show dozens of changes for an Azure Application Gateway when I only added one backend server?

Your Terraform plan shows dozens of changes because AzureRM Set-type attributes like backend_address pools generate false-positive diffs when element ordering shifts. Analyzing the plan JSON filters these noise changes, showing that only one element was truly affected.

Can I integrate Terraform AzureRM plan analysis into my CI/CD pipeline?

Yes, you can integrate Terraform AzureRM plan analysis into your CI/CD pipeline by processing the plan JSON output with optional exit codes. This allows your automation workflow to fail or pass based on actual resource modifications rather than false-positive Set diffs.

What output formats are available when analyzing Terraform plan JSON for AzureRM Set diffs?

Available output formats when analyzing Terraform plan JSON for AzureRM Set diffs include markdown, JSON, and summary formats. These options allow you to easily integrate the filtered plan analysis results into your existing review workflows or automation reports.

Does this Terraform plan analysis work for Azure Network Security Group security_rule changes?

Yes, this Terraform plan analysis works for Azure Network Security Group security_rule changes by specifically targeting Set-type attributes. It effectively filters out false-positive diffs caused by rule reordering, ensuring your plan review focuses only on actual security rule additions or modifications.