Very useful post. Real life applicable

Oh I know blast radius. It doesn't do anything to help. Consider having an infra or multiple generic projects that have elevated permissions and multiple projects with their own state. Each team has access only to their own state with the pipeline only able to fetch(but not change) remote state from the elevated projects Christopher K.M Etou

No mention of environments, modules,zero code re-use and an amateur take on Terraform. I wouldn't call it best practices

Thank you for writing something more than a "Launch a VM in AWS" blog. I love to discuss complex architectures on any cloud :D