What it does
IaC Review Agent turns the chore of reading a terraform plan line by line and guessing at the risk into an actual review. You supply the parsed plan — a resource-change array from terraform plan -json or helm diff — and it comes back with three things a reviewer needs and rarely has time to work out by hand. Security first: ports opened to 0.0.0.0/0, publicly readable S3 buckets, and IAM policies granting Action or Resource wildcards. `check_least_privilege` isolates that last category on its own, because an over-privileged role is usually a different conversation with a different owner than an open port. Then cost. It computes the approximate monthly delta the change introduces — plus $340 a month, stated up front — from the before and after figures in the plan. This is the number that never appears in an infra review and that finance asks about a quarter later. `estimate_cost` gives you just that summary when the security review is already done. Then drift: resources whose live cloud state has diverged from the committed config, which is how a carefully reviewed plan applies differently than anyone expected. All of it rolls into a ready-to-post pull request comment, so the output goes where the decision is made rather than into a dashboard nobody opens. One thing stated plainly rather than buried: the cost estimate is approximate and positioned as decision support, not a guaranteed invoice. An infra cost figure presented as exact is worse than no figure at all. Findings, cost deltas, severities and counts are all computed from the plan you supply. The language model only narrates the summary and never touches the figures, and untrusted plan text such as resource names and drift notes is sanitised and scanned for prompt injection before it can reach the model. No connectors and no credentials — it never calls a cloud API, Infracost or tfsec itself. Built for DevOps and platform engineers who review infrastructure changes.
Example prompts
- Review this Terraform plan for security, cost and drift
- How much will this change add to our monthly bill?
- Are we opening any ports to the world in this plan?
