2.3.1 Infrastructure as Code
Terraform, Pulumi, CloudFormation, CDK: a plan/apply instead of clicking the console.
Why it matters
ClickOps cannot be reviewed or rebuilt after a fire. Drift between staging and prod is a bug factory.
How it is used
One repo (or module set) per account. PR the plan. Lock state. Never apply from a laptop as the only path to prod.