From Manual Setup to IaC: Stop Clicking the AWS Console

An EC2 instance here, an S3 bucket with a specific config there, a security group someone tweaked manually six months ago. The console is stateless - it doesn't remember intent, it just shows current