terraform-azurerm-set-diff-analyzer

Terraform plan shows changes for AzureRM Application Gateway because Set-type attributes often trigger false-positive diffs when elements are reordered. The analyzer reads the plan JSON to distinguish reordered elements from actual changes.

To detect false-positive diffs in a Terraform plan JSON, run the Python-based analyzer using the command python3 scripts/analyze_plan.py plan.json. It reads the plan output and a JSON attribute definition to produce detailed change reports.

AzureRM resources affected by Set-type attribute false-positive diffs include Application Gateway, Load Balancer, NSG, and Front Door. The analyzer identifies order-only changes versus real modifications across these Set-based attributes.

You can filter Terraform plan noise in a CI/CD pipeline by running the analyzer on the plan JSON. It reports precise adds, removes, and modifications with path context, effectively removing false-positive diff noise for AzureRM resources.

The analyzer supports nested Set attributes in Terraform plan outputs by using external attribute definitions. This improves accuracy by reporting precise modifications with path context even within nested structures.