Terraform and OpenTofu

Write and review reproducible infrastructure with narrow state boundaries, protected credentials, reviewable plans, and explicit human approval for every apply. Use the installed runtime and pinned provider schema as the authority for resource arguments and behavior.

Version-specific behavior: inspect the existing lock file and provider documentation before changing pins or relying on a runtime feature.

When to use

• Writing or reviewing Terraform/OpenTofu configurations, modules, providers, state, or imports
• Designing backend, locking, state-boundary, OIDC, policy-as-code, or drift-detection decisions
• Implementing infrastructure controls for regulated or PCI-scoped systems
• Reviewing generated HCL for security, correctness, replacement, and state impact

When NOT to use