The following are the Terraform best practices:
- Stack of desired state applies here as well: It is very much possible that some one might change certain aspects of the infrastructure, such as security group, manually during troubleshooting phase and forget about it. This in fact is the case in many organizations using Infrastructure as a Code (IAC). Thus, similar to Ansible, running Terraform apply for your services on a regular basis will delete these manual changes and the state will always remain consistent.
- Don't forget the pull request: The pull request is one big advantage of running infrastructure as code. This should be an important part. Code review by peers should always be present.
- Integration of infrastructure ...