u/faouzi_mahmoudi

I’ve been working on Terraform generation for multi-cloud architectures and I keep coming back to the same problem:
Generating valid HCL is the easy part.
Generating infrastructure I would actually trust is much harder.
Right now I’m looking at the generated stack in several layers:
provider-specific Terraform resources
variables and outputs
remote state configuration
networking and IAM
security validation
cost estimation
documentation explaining the architecture
The difficult part isn’t generating those files. It’s deciding what should be automatically generated versus what should require an engineer to explicitly approve it.
For example, I wouldn’t want a generator silently making important IAM, networking or state decisions just because the Terraform validates successfully.
So for people running Terraform in production:
What would you need to see before you’d trust generated Terraform enough to actually run terraform plan on it?
Tests? Checkov/tfsec? Policy-as-code? A generated architecture diagram? Cost diff? Something else?

I work a lot with cloud infrastructure, and one thing I kept finding repetitive was comparing AWS, Azure, GCP and European providers before even starting the IaC.
So I’ve been building a tool that takes requirements like budget, region, Kubernetes, availability and compliance, then compares multiple providers and proposes an architecture.
It now generates an organized infrastructure stack with Terraform/OpenTofu, architecture documentation, cost estimates, security checks, and optional Kubernetes/Helm/CI-CD artifacts.
I’m still working on making the generated Terraform more production-ready, so I’m not pretending it can blindly deploy infrastructure. The goal is to generate a solid starting point that an engineer can review and adapt.
I’m curious about one thing from people actually working with cloud infrastructure:
What would you need to see in the generated output before you would trust a tool like this on a real project?
Happy to share screenshots or the project if anyone wants to test it.