Use reviewed, version-controlled infrastructure-as-code

Use reviewed, version-controlled infrastructure-as-code | BeforeMerge Rules | BeforeMerge

Why this matters

Infrastructure changed by hand in a console leaves no history, no review, and no way to recreate it. Defining infra as code (Terraform, Pulumi, etc.) under version control makes every change reviewed, auditable, and reproducible.

Bad

# resize the prod DB and open a security group via the cloud console UI

Good

resource "aws_db_instance" "prod" {
  instance_class = "db.r6g.large"   # reviewed in PR, applied by pipeline
}

Why This Matters

Related Rules

Catch this automatically on every PR

Why this matters