#refactoring

DevOps & CI/CD

Splitting a 900-resource Terraform state into layers: network, data and app

Isabel Ferreira · Jun 27, 2026 · 7 min read

One Terraform state for a whole environment meant 11-minute plans, fragile applies and an app deploy that could touch the VPC. How we split it into layers by rate of change and blast radius, passed values between them, moved resources with removed and import blocks, and kept the apply order sane.

DevOps & CI/CD

Bringing click-ops AWS resources under Terraform with import blocks and generated config

Isabel Ferreira · Mar 14, 2026 · 7 min read

We inherited an AWS account built by hand: 60 resources nobody dared to touch. Terraform import blocks with -generate-config-out let us adopt them in reviewed pull requests with a zero-change plan as proof. The workflow, the cleanup the generated code needs, and the traps.