Terraform & OpenTofu Validator
Local IaC reviewMap HCL resources and references, review IaC risks, redact Plan JSON, and compare destructive changes.
Nothing is executed or uploaded. Exact validation still requires initialized modules and provider schemas in the Terraform or OpenTofu CLI.
Ready to review infrastructure code
Load HCL and optional Plan JSON to map resources, mask sensitive evidence and review destructive changes.
How to use it
- 01
Load configuration evidence
Paste or select HCL files and optionally add a machine-readable Terraform or OpenTofu plan JSON.
- 02
Map configuration and change
Inventory blocks and references, follow the dependency graph, and review create, update, delete and replacement actions.
- 03
Protect and reproduce
Apply declared sensitive masks, compare plans, export a redacted review and run exact validation with generated CLI commands.
Frequently asked questions
Does this replace terraform or tofu validate?
No. Exact validation requires the CLI, initialized modules and provider schemas. This browser tool performs syntax-aware inventory and conservative static checks.
Can it run plan or apply?
No. It accepts existing JSON plan evidence but never installs providers, contacts remote state, requests cloud credentials or changes infrastructure.
Can Plan JSON contain secrets?
Yes. Declared before_sensitive and after_sensitive paths are masked, but providers or configuration can place sensitive values elsewhere. Review every plan and export carefully.
Does the editor estimate cloud cost?
No. Prices, provider semantics, discounts and runtime usage change independently of static HCL, so the page does not present speculative cost totals.
Related tools
Keep working with other focused browser utilities.