aws.amazon.com/about-aws/…/iam-policy-autopilot-now-supports-terraform-plan-files Hot off the press! I will enjoy testing this one. It could bring some of the discipline of (template-specific) CloudFormation execution roles to Terraform.