Tag
© 2026 Hashnode
TL;DR Least privilege is a loop, not a policy you write once: grant what a workload demonstrably needs, watch what it actually uses (CloudTrail), remove the rest, repeat. Prefer roles and temporary c

TL;DR State is Terraform's memory of what it manages. Lose it or corrupt it and Terraform doesn't lose your infrastructure — it loses the map to it, which from the operator's chair is nearly as bad.

An honest note (new — replaces the old "$50K/month" claim): The previous version of this article claimed these tactics "saved us $50K/month," with a before-and-after bill table. Those numbers were ill
