Terraform - Practical insights for IT professionals

Plan Wanted to Delete the Disks to Fix a Permission

08/12/202604/05/2026 by Serhii Matiushchenko

Reading Time: 3 minutesA one-line module version bump, meant to carry over a small permissions fix, produced a plan that wanted to destroy and rebuild the storage volumes of a live cluster. The resource hadn’t changed at all; the way the tool addressed it internally had.

Terraform Plan That Wanted to Roll Back Nothing Into Something Worse

08/12/202602/12/2026 by Serhii Matiushchenko

Reading Time: 3 minutesA routine version bump turned into a plan that quietly proposed rolling several production databases backward instead of forward. The infrastructure code hadn’t drifted because someone made a mistake; the databases had simply been patched by the cloud provider without anyone updating the code to match.

“It’s Already Working in Production” Is Not the Same as “It’s Complete”

08/12/202612/12/2025 by Serhii Matiushchenko

Reading Time: 3 minutesReusing an IAM policy that had been running cleanly in production for months seemed like the safe move, until a newer version of the same controller called an API action the old policy had never heard of, and the failure only showed up after a step Terraform never even touched. Focus keyword: IAM policy version compatibility Title: “It’s Already Working in Production” Is Not the Same as “It’s Complete”.