Reviewing the Terraform Your Coding Agent Wrote

Coding agents produce Terraform that plans cleanly and hides its risk in a few lines. Where to look in the diff, and a Conftest policy that fails the plan when an IAM statement allows iam:PassRole without a service condition.