Terraform plan linter

Basic linter for terraform plan output. Currently in development.

Usage

# Build project
go build

# Get terraform plan
terraform plan -out=plan.out
terraform show -json plan.out > plan.json

./terraform-plan-lint plan.json

Configuration file example

rules:
  exampleRule:
    type: tags
    key: Owner
    possible_values: ['team1', 'team2']
    target_aws_resources: # Optional, if not provided it will check all resources
      - aws_s3_bucket
    fetch_possible_values_from:
      url: https://myapi.com/possible_values # Optional, otherwise it will use possible_values

Example output

./terraform-plan-linter /home/user/terraform/staging/tfplan.json
Validation completed. The following issues were found:
ERROR resource module.user_profiles.aws_s3_bucket.default has invalid 'Owner' tag value: infrastructure
Should be one of product, engineering, finance, marketing, sales
ERROR resource module.analytics.aws_s3_bucket.default has invalid 'Owner' tag value: infrastructure
Should be one of product, engineering, finance, marketing, sales