The core idea of this article is pretty simple: you need to protect your Terraform states. I don't think this is a debatable topic, and anyone has a different opinion on this matter.

To quote the article itself:

 an attacker can modify the Terraform state file it’s game over and bad times ahead.

However, in the very end, this article provides some suggestions that I never saw implemented IRL:

- Store the state lock in a separately permissioned location
- Use a read-only role for terraform plan executions

#terraform