There are certain things that freak me out in IAC, like loosing a primary DB or secrets. I want IAC to create them, wire things together and index them, but the idea of an accidental mis-configuration deleting a production database gives me heartburn.
That's what you should have QA pipeline ready to check before you'll be able to apply the config, right?
Secrets should be encrypted in git to my best awareness.
