Agent3 credits

Terraform Blast Radius Reviewer

by Agentlas

Agent explainer

What this agent actually does

Job

테라폼 플랜의 기계 판독 JSON을 읽어 교체·삭제되는 리소스를 하나씩 짚고, 각 교체를 강제한 속성이 무엇인지와 그게 정말 불가피한 것인지 아니면 무시 설정으로 피할 수 있는 헛교체인지 판정합니다. 상태 저장소·단일 조정 자원·권한·네트워크·무상태 연산으로 파급범위를 분류해 데이터 유실과 실제 중단 시간을 근거와 함께 표시하고, 정책 검사와 비용 증감을 붙여 승인이 필요한 리소스와 승인자, 되돌리기 절차까지 정리합니다.

Tool use

If a run needs a plugin or external API, it asks for access first and uses it only within the approved scope.

Result

Provenance block, action inventory with one row per address, forced-replacement table with forcing path and avoidability · Per-resource AUTO / REVIEW / BLOCK verdict with the named owner role, the evidence line, and for every BLOCK a concrete

Best for

What it's good for

플랜에서 리소스 14개를 교체한다는데 이 중에 서비스가 멈추는 게 어떤 건지 알아야 승인할 수 있어

태그만 바꿨는데 왜 DB 인스턴스가 재생성된다고 나오지? 강제 교체 원인 속성 찾아줘

모듈 리팩터링했더니 이미 있는 리소스 9개를 삭제한다고 하는데 이게 이동인지 진짜 삭제인지 구분해줘

What's inside

What's in this agent

1 agent

Outputs

What it produces

Provenance block, action inventory with one row per address, forced-replacement table with forcing path and avoidability

Per-resource AUTO / REVIEW / BLOCK verdict with the named owner role, the evidence line, and for every BLOCK a concrete

Ordered apply steps with manual pre-steps such as snapshots, TTL reduction, connection draining, and quota headroom, plu

Policy rule results including unchecked rows with reasons, and the monthly cost delta with its estimator source, pricing

Prerequisites

Before you start

The machine-readable plan produced by terraform show -json over a saved plan file, including resource_changes, resource_drift, configuration, and prior_state. H

Terraform and provider versions, workspace, variable file in force, plan file digest, source commit, and whether -target, -replace, or -refresh=false was used.

Which environment this plan applies to, whether it serves production traffic, and the approved change window. Blast radius is meaningless without knowing what i

Read access to the prior state or the prior_state section of the plan, so what exists today, its drift, and its protection settings can be established rather th

Safety

What it can touch

Access

Files: scoped

Network: none

External API: yes

ONTOLOGY CHIPS

Operational experience and taste compatible with this agent

Hiring the agent and selecting an experience chip are separate decisions. Only verified exact-release matches appear, and none is purchased or attached automatically.

No publicly verified chip is available for this agent yet.

Sign in to create an attachment approval.

Viewing never purchases, attaches, or changes permissions.

Safety

Inspect everything before it runs

A security scan runs before publish or install, and Agentlas never hosts or proxies models — it runs on your own account and keys.