terraform-plan-analyzer

Reviewing Terraform plan output identifies destructive changes and security regressions before apply. It parses plan JSON to flag stateful deletions, IAM changes, and network exposure, producing a written report to help teams decide if the plan is safe to apply.

Security risks in Terraform plan output include IAM changes, network exposure modifications, and encryption changes. Analyzing the plan JSON detects these security-sensitive updates and classifies them to warn you of potential access widening or encryption downgrades before deployment.

You can estimate cost impact by parsing Terraform plan JSON to identify cost-impacting resources. The analysis highlights creates, updates, and destroys that raise monthly cloud spend, summarizing the financial impact in a generated risk report.

Yes, you can detect infrastructure drift using Terraform plan JSON. The analysis identifies drift by parsing resource changes and comparing the planned state against expected configurations, flagging unexpected modifications before you apply changes to your infrastructure.

Terraform plan analysis works for pull request validation by inspecting the plan output to see whether changes will delete resources, widen access, or raise spend. It generates a risk report that helps reviewers determine if a pull request is safe to merge.