tf-plan-reviewv0.2.1

A DevOps engineer prepares to apply a Terraform plan to update a production environment. The skill analyzes the plan, flags a critical IAM policy change and a database replace action, preventing a potential security misconfiguration and data loss. It provides a detailed risk breakdown and a clear 'DO NOT APPLY' recommendation with verification steps.

A security team uses the skill to review Terraform plans in a regulated industry (e.g., finance or healthcare) before deployment. It detects unauthorized IAM modifications or deletions of encryption keys, ensuring changes comply with internal policies and regulatory standards like HIPAA or PCI-DSS, and generates an audit-ready risk report.

An SRE investigates unexpected infrastructure behavior by running the skill to compare current state with configuration. It identifies drift, such as manually modified security group rules or deleted resources, classifying each change's risk to prioritize remediation without disrupting services, aiding in maintaining infrastructure consistency.

A team lead integrates the skill into a development workflow to mentor new engineers. When they submit a Terraform plan, the skill provides educational feedback on risk levels (e.g., why a replace action is dangerous), helping them learn best practices and avoid costly mistakes in non-production environments like staging.

A company using OpenTofu for multi-cloud infrastructure (e.g., AWS and Azure) applies the skill to review plans across providers. It assesses cross-resource dependencies and blast radius, flagging critical changes like VPC deletions that could cascade across clouds, ensuring safe and coordinated deployments.

Offer the skill as part of a paid SaaS platform where teams pay a monthly fee per user or project. It integrates with CI/CD pipelines and provides advanced features like historical risk tracking, team collaboration tools, and compliance reporting, generating recurring revenue from enterprises.

Provide professional services where experts use the skill to audit and review client Terraform deployments. This includes custom risk assessments, training workshops, and ongoing support contracts, leveraging the skill as a tool to deliver high-value consulting engagements.

Release a free version of the skill for individual developers with basic risk analysis. Monetize by offering premium tiers for teams, including features like automated policy enforcement, integration with enterprise tools (e.g., Jira, Slack), and priority support, driving upgrades from growing organizations.