Purpose
This checklist verifies the plan output is correct before applying. The plan is the operational artefact. The review is the safety net.
Order of work
plan-review-1 checks the summary line against the ticket, which catches a
wrong workspace or a wrong variable file before anything else is read.
plan-review-2 to plan-review-5 walk the four actions Terraform can propose
— create, update in-place, replace, and destroy — in ascending order of blast
radius. plan-review-6 and plan-review-7 look for what should not be in the
output at all: resources nobody asked for, and sensitive values on display.
plan-review-8 to plan-review-10 cover the saved plan, the second reader,
and the archived artefact.
Verification
The checklist is complete when every item is checked. A
critical item unchecked is a blocker. The plan is not safe to
apply.
Escalation
If a critical item cannot be satisfied, escalate to the engineering manager or the change manager.