The aspect of Terraform configuration tests has been discussed several times in this book, such as using terratest (in the Testing Terraform module code with Terratest recipe of Chapter 5, Provisioning Azure Infrastructure with Terraform) and kitchen-terraform (in the Testing Terraform configuration using kitchen-terraform recipe of Chapter 7, Deep Diving into Terraform). The common point of these two tools is that the purpose of the tests is to write and test the changes that have already been applied by Terraform.
All these tests are very beneficial but they are done after the changes have been made. The rollback also requires work from all teams. To be even more in line with the business and financial requirements of the company, there is another level of testing that verifies the compliance of the Terraform configuration before it is applied to the target infrastructure.
In Terraform, these compliance tests are carried...
