Standards and workflows for building secure, well-structured Terraform modules, including planning gates, validation steps, and implementation guidance.
82
84%
Does it follow best practices?
Impact
80%
1.77xAverage score across 5 eval scenarios
Passed
No known issues
Your team completed a sprint with several parallel workstreams that touched different parts of the repository. Before merging the pull requests, a tech lead wants a written validation plan for each change set — something that makes explicit exactly which commands to run, what the success criteria are for each command, and how to handle any gate that can't be executed in the current environment.
One of the gates cannot be run right now because the test environment is temporarily unavailable due to an ongoing platform migration. The plan needs to handle this gracefully with a proper waiver rather than just skipping it silently.
The validation plan will be reviewed by the tech lead before any PR is merged.
Produce a single markdown document validation-plan.md that covers all three change sets below. For each change set:
The three change sets are:
Change set A — documentation update only:
docs/repo-indexes/modules.md — added entry for new moduledocs/index.md — updated overview paragraphChange set B — module source change:
modules/rds/main.tf — added backup_retention_period variable and resource attributemodules/rds/variables.tf — added new variable definitionChange set C — coordinated module + example update:
modules/s3/main.tf — added versioning blockmodules/s3/variables.tf — added enable_versioning variableexamples/test_app/main.tf — updated module call to pass enable_versioning = trueAdditionally, the terraform -chdir=examples/test_app plan gate for change set C cannot be run at this time because the test AWS environment is under maintenance. Include an appropriate waiver for this.