You want to enforce that all Terraform changes go through a code review and plan approval before `apply`. Which tool natively supports this workflow?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Terraform Cloud / HCP Terraform with policy as code (Sentinel)

Terraform Cloud (now HCP Terraform) has built-in VCS integration, plan-in-UI review workflows, and Sentinel policy-as-code enforcement. It can require explicit approval before `app...

Real Exam Scenario

You want to enforce that all Terraform changes go through a code review and plan approval before `apply`. Which tool natively supports this workflow?

✓ Correct Answer & Explanation

Correct Answer

Terraform Cloud / HCP Terraform with policy as code (Sentinel)

Why This Answer Is Correct

Terraform Cloud (now HCP Terraform) has built-in VCS integration, plan-in-UI review workflows, and Sentinel policy-as-code enforcement. It can require explicit approval before `apply` runs. Manually saving plan files with `-out` is a partial workaround but doesn't enforce review in a team setting. CloudFormation is AWS-specific and not Terraform.