Bringing click-ops AWS resources under Terraform with import blocks and generated config
We inherited an AWS account built by hand: 60 resources nobody dared to touch. Terraform import blocks with -generate-config-out let us adopt them in reviewed pull requests with a zero-change plan as proof. The workflow, the cleanup the generated code needs, and the traps.