u/Foreign_Cat8783

Inherited an AWS account with hundreds of resources never in code. Manual terraform import at this scale is brutal, writing HCL by hand, then reconciling state one resource at a time.
A few things I've looked at:
AI-assisted codification (tools that generate HCL from discovery scans)
Scripted wrappers around terraform import for bulk jobs
How much time did automated codification actually save people who've tried it?

Compliance is asking for proof we can recover cloud infra within a defined timeframe. "We have backups" apparently isn't going to cut it.

What actually satisfies an auditor here, documented RTO/RPO per workload, a tested rebuild log, something else? Anyone been through a DORA or NIS2 audit recently who can share what held up