terraform-plan-risk-auditor

Description

Analyze Terraform plan JSON (from terraform show -json plan.out) for risky changes like destroys, replaces, IAM changes, and potential public exposure.

Inputs

{
  "plan_json": {"resource_changes": []},
  "plan_json_text": "{...}",
  "plan_path": "path/to/plan.json",
  "max_findings": 50,
  "focus": "security|cost|all"
}

Notes:

• Provide exactly one of plan_json, plan_json_text, or plan_path.
• focus filters findings (security, cost, or all).