Infrastructure as Code Toolkit

Production patterns for managing cloud infrastructure with Terraform and OpenTofu. Not a tutorial -- the patterns you need after the tutorial, when you have 50 resources across 3 environments and your state file is a liability.

Covers: remote state with locking (S3/GCS/Azure), reusable module architecture with versioning, drift detection via scheduled plans, cost estimation with Infracost integration, CI/CD pipelines (GitHub Actions/GitLab CI) with destroy protection, state surgery (import, move, remove), multi-environment isolation, security patterns (no secrets in state, least-privilege IAM, encrypted state), and tagging for cost allocation.

Includes complete code examples for: project directory structure, backend configuration, provider pinning, variable validation, module composition, GitHub Actions workflows with plan-as-PR-comment, Infracost cost policies, prevent_destroy lifecycle rules, and secret manager references.

Every agent operator managing cloud infrastructure needs IaC patterns that prevent the 3 AM incident caused by an unreviewed terraform apply. This is that toolkit.