Terraform Plan Executor

Hook Content

The main content for this hook.

post-tool-use.json

json

{
  "hookConfig": {
    "hooks": {
      "postToolUse": {
        "script": "./.claude/hooks/terraform-plan-executor.sh",
        "matchers": [
          "write",
          "edit"
        ]
      }
    }
  },
  "scriptContent": "#!/bin/bash\n\n# Read the tool input from stdin\nINPUT=$(cat)\nTOOL_NAME=$(echo \"$INPUT\" | jq -r '.tool_name')\nFILE_PATH=$(echo \"$INPUT\" | jq -r '.tool_input.file_path // .tool_input.path // \"\"')\n\nif [ -z \"$FILE_PATH\" ]; then\n  exit 0\nfi\n\n# Check if this is a Terraform file\nif [[ \"$FILE_PATH\" == *.tf ]] || [[ \"$FILE_PATH\" == *.tfvars ]]; then\n    echo \"🏗️ Terraform Plan Executor - Analyzing infrastructure changes...\"\n    echo \"📄 File: $FILE_PATH\"\n    \n    # Check if file exists\n    if [ ! -f \"$FILE_PATH\" ]; then\n        echo \"⚠️ Terraform file not found: $FILE_PATH\"\n        exit 1\n    fi\n    \n    # Get the directory containing the Terraform file\n    TF_DIR=$(dirname \"$FILE_PATH\")\n    TF_FILE=$(basename \"$FILE_PATH\")\n    \n    echo \"📁 Working directory: $TF_DIR\"\n    cd \"$TF_DIR\" || exit 1\n    \n    # Check if Terraform is installed\n    if ! command -v terraform >/dev/null 2>&1; then\n        echo \"⚠️ Terraform not found - please install Terraform\"\n        echo \"💡 Install from: https://www.terraform.io/downloads\"\n        exit 1\n    fi\n    \n    # Get Terraform version\n    TF_VERSION=$(terraform version -json 2>/dev/null | jq -r '.terraform_version' 2>/dev/null || terraform version | head -1)\n    echo \"📦 Terraform version: $TF_VERSION\"\n    \n    # Step 1: Format check\n    echo \"\"\n    echo \"🎨 Checking Terraform formatting...\"\n    if terraform fmt -check \"$TF_FILE\"; then\n        echo \"✅ Terraform formatting is correct\"\n    else\n        echo \"⚠️ Terraform formatting issues detected\"\n        echo \"💡 Run 'terraform fmt' to fix formatting\"\n        \n        # Auto-fix formatting if requested\n        echo \"🔧 Auto-fixing formatting...\"\n        terraform fmt \"$TF_FILE\"\n        echo \"✅ Formatting applied to $TF_FILE\"\n    fi\n    \n    # Step 2: Validation\n    echo \"\"\n    echo \"🔍 Validating Terraform configuration...\"\n    if terraform validate; then\n        echo \"✅ Terraform configuration is valid\"\n    else\n        echo \"❌ Terraform validation failed\"\n        echo \"💡 Fix validation errors before proceeding\"\n        exit 1\n    fi\n    \n    # Step 3: Initialize if needed\n    if [ ! -d \".terraform\" ]; then\n        echo \"\"\n        echo \"🔄 Initializing Terraform...\"\n        if terraform init; then\n            echo \"✅ Terraform initialized successfully\"\n        else\n            echo \"❌ Terraform initialization failed\"\n            exit 1\n        fi\n    fi\n    \n    # Step 4: Run terraform plan\n    echo \"\"\n    echo \"📋 Running Terraform plan...\"\n    \n    PLAN_FILE=\".terraform-plan-$(date +%s)\"\n    \n    if terraform plan -out=\"$PLAN_FILE\" -compact-warnings; then\n        echo \"✅ Terraform plan completed successfully\"\n        \n        # Analyze the plan\n        echo \"\"\n        echo \"📊 Plan Analysis:\"\n        \n        # Show plan summary\n        if terraform show -json \"$PLAN_FILE\" >/dev/null 2>&1; then\n            PLAN_JSON=$(terraform show -json \"$PLAN_FILE\" 2>/dev/null)\n            \n            # Count changes\n            RESOURCES_TO_ADD=$(echo \"$PLAN_JSON\" | jq -r '.resource_changes[]? | select(.change.actions[]? == \"create\") | .address' 2>/dev/null | wc -l)\n            RESOURCES_TO_CHANGE=$(echo \"$PLAN_JSON\" | jq -r '.resource_changes[]? | select(.change.actions[]? == \"update\") | .address' 2>/dev/null | wc -l)\n            RESOURCES_TO_DESTROY=$(echo \"$PLAN_JSON\" | jq -r '.resource_changes[]? | select(.change.actions[]? == \"delete\") | .address' 2>/dev/null | wc -l)\n            \n            echo \"  • Resources to add: $RESOURCES_TO_ADD\"\n            echo \"  • Resources to change: $RESOURCES_TO_CHANGE\"\n            echo \"  • Resources to destroy: $RESOURCES_TO_DESTROY\"\n            \n            # Show resource details if any changes\n            if [ \"$RESOURCES_TO_ADD\" -gt 0 ] || [ \"$RESOURCES_TO_CHANGE\" -gt 0 ] || [ \"$RESOURCES_TO_DESTROY\" -gt 0 ]; then\n                echo \"\"\n                echo \"🔍 Detailed Changes:\"\n                \n                if [ \"$RESOURCES_TO_ADD\" -gt 0 ]; then\n                    echo \"  📦 Resources to create:\"\n                    echo \"$PLAN_JSON\" | jq -r '.resource_changes[]? | select(.change.actions[]? == \"create\") | \"    • \" + .address' 2>/dev/null\n                fi\n                \n                if [ \"$RESOURCES_TO_CHANGE\" -gt 0 ]; then\n                    echo \"  🔄 Resources to modify:\"\n                    echo \"$PLAN_JSON\" | jq -r '.resource_changes[]? | select(.change.actions[]? == \"update\") | \"    • \" + .address' 2>/dev/null\n                fi\n                \n                if [ \"$RESOURCES_TO_DESTROY\" -gt 0 ]; then\n                    echo \"  🗑️ Resources to destroy:\"\n                    echo \"$PLAN_JSON\" | jq -r '.resource_changes[]? | select(.change.actions[]? == \"delete\") | \"    • \" + .address' 2>/dev/null\n                fi\n            else\n                echo \"  ℹ️ No infrastructure changes detected\"\n            fi\n        fi\n        \n        # Clean up plan file\n        rm -f \"$PLAN_FILE\"\n        \n    else\n        echo \"❌ Terraform plan failed\"\n        rm -f \"$PLAN_FILE\"\n        exit 1\n    fi\n    \n    # Additional analysis\n    echo \"\"\n    echo \"🔍 Configuration Analysis:\"\n    \n    # Count resources in current file\n    RESOURCE_COUNT=$(grep -c '^resource ' \"$TF_FILE\" 2>/dev/null || echo 0)\n    DATA_COUNT=$(grep -c '^data ' \"$TF_FILE\" 2>/dev/null || echo 0)\n    VAR_COUNT=$(grep -c '^variable ' \"$TF_FILE\" 2>/dev/null || echo 0)\n    OUTPUT_COUNT=$(grep -c '^output ' \"$TF_FILE\" 2>/dev/null || echo 0)\n    \n    echo \"  • Resources defined: $RESOURCE_COUNT\"\n    echo \"  • Data sources: $DATA_COUNT\"\n    echo \"  • Variables: $VAR_COUNT\"\n    echo \"  • Outputs: $OUTPUT_COUNT\"\n    \n    # Check for common patterns\n    if grep -q 'provider ' \"$TF_FILE\" 2>/dev/null; then\n        echo \"  • 🔌 Provider configurations detected\"\n    fi\n    \n    if grep -q 'module ' \"$TF_FILE\" 2>/dev/null; then\n        echo \"  • 📦 Module usage detected\"\n    fi\n    \n    if grep -q 'locals ' \"$TF_FILE\" 2>/dev/null; then\n        echo \"  • 🏷️ Local values defined\"\n    fi\n    \n    # Security and best practices check\n    echo \"\"\n    echo \"🔒 Security Analysis:\"\n    \n    if grep -i 'password\\\\|secret\\\\|key' \"$TF_FILE\" 2>/dev/null | grep -v 'var\\.' | grep -v 'data\\.' >/dev/null; then\n        echo \"  • ⚠️ Potential hardcoded secrets detected - use variables instead\"\n    fi\n    \n    if grep -q '0.0.0.0/0' \"$TF_FILE\" 2>/dev/null; then\n        echo \"  • ⚠️ Open security group rules detected (0.0.0.0/0)\"\n    fi\n    \n    if ! grep -q 'tags\\\\|Tags' \"$TF_FILE\" 2>/dev/null && [ \"$RESOURCE_COUNT\" -gt 0 ]; then\n        echo \"  • 💡 Consider adding resource tags for better management\"\n    fi\n    \n    echo \"\"\n    echo \"💡 Terraform Best Practices:\"\n    echo \"  • Use terraform fmt to maintain consistent formatting\"\n    echo \"  • Store sensitive values in variables, not hardcoded\"\n    echo \"  • Use remote state backend for team collaboration\"\n    echo \"  • Implement resource tagging strategy\"\n    echo \"  • Use terraform validate in CI/CD pipelines\"\n    echo \"  • Review plans carefully before applying\"\n    \n    echo \"\"\n    echo \"🎯 Terraform plan execution complete!\"\n    \nelse\n    echo \"ℹ️ File is not a Terraform file: $FILE_PATH\"\nfi\n\nexit 0"
}

Features

Key capabilities and functionality

Automatic Terraform plan execution on file changes
Configuration syntax validation and formatting
Resource change preview and analysis
Multi-provider support and validation
Cost estimation and impact analysis
Security and compliance checking

Installation

Setup instructions and requirements

Claude Code Setup

Create hooks directory: mkdir -p .claude/hooks
Create hook script: .claude/hooks/terraform-plan-executor.sh
Add hook configuration to your Claude Code config
Make script executable: chmod +x .claude/hooks/terraform-plan-executor.sh
Restart Claude Code to activate the hook

Configuration Paths

project

.claude/hooks/

user

~/.claude/hooks/

Requirements

Claude Code CLI
Bash shell
Hook-specific dependencies (e.g., jq, prettier)

Hook Configuration

Hook setup and script content

post-tool-use-config.json

json

{
  "hooks": {
    "postToolUse": {
      "script": "./.claude/hooks/terraform-plan-executor.sh",
      "matchers": [
        "write",
        "edit"
      ]
    }
  }
}

post-tool-use-script.sh

bash

#!/bin/bash

# Read the tool input from stdin
INPUT=$(cat)
TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name')
FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .tool_input.path // ""')

if [ -z "$FILE_PATH" ]; then
  exit 0
fi

# Check if this is a Terraform file
if [[ "$FILE_PATH" == *.tf ]] || [[ "$FILE_PATH" == *.tfvars ]]; then
    echo "🏗️ Terraform Plan Executor - Analyzing infrastructure changes..."
    echo "📄 File: $FILE_PATH"
    
    # Check if file exists
    if [ ! -f "$FILE_PATH" ]; then
        echo "⚠️ Terraform file not found: $FILE_PATH"
        exit 1
    fi
    
    # Get the directory containing the Terraform file
    TF_DIR=$(dirname "$FILE_PATH")
    TF_FILE=$(basename "$FILE_PATH")
    
    echo "📁 Working directory: $TF_DIR"
    cd "$TF_DIR" || exit 1
    
    # Check if Terraform is installed
    if ! command -v terraform >/dev/null 2>&1; then
        echo "⚠️ Terraform not found - please install Terraform"
        echo "💡 Install from: https://www.terraform.io/downloads"
        exit 1
    fi
    
    # Get Terraform version
    TF_VERSION=$(terraform version -json 2>/dev/null | jq -r '.terraform_version' 2>/dev/null || terraform version | head -1)
    echo "📦 Terraform version: $TF_VERSION"
    
    # Step 1: Format check
    echo ""
    echo "🎨 Checking Terraform formatting..."
    if terraform fmt -check "$TF_FILE"; then
        echo "✅ Terraform formatting is correct"
    else
        echo "⚠️ Terraform formatting issues detected"
        echo "💡 Run 'terraform fmt' to fix formatting"
        
        # Auto-fix formatting if requested
        echo "🔧 Auto-fixing formatting..."
        terraform fmt "$TF_FILE"
        echo "✅ Formatting applied to $TF_FILE"
    fi
    
    # Step 2: Validation
    echo ""
    echo "🔍 Validating Terraform configuration..."
    if terraform validate; then
        echo "✅ Terraform configuration is valid"
    else
        echo "❌ Terraform validation failed"
        echo "💡 Fix validation errors before proceeding"
        exit 1
    fi
    
    # Step 3: Initialize if needed
    if [ ! -d ".terraform" ]; then
        echo ""
        echo "🔄 Initializing Terraform..."
        if terraform init; then
            echo "✅ Terraform initialized successfully"
        else
            echo "❌ Terraform initialization failed"
            exit 1
        fi
    fi
    
    # Step 4: Run terraform plan
    echo ""
    echo "📋 Running Terraform plan..."
    
    PLAN_FILE=".terraform-plan-$(date +%s)"
    
    if terraform plan -out="$PLAN_FILE" -compact-warnings; then
        echo "✅ Terraform plan completed successfully"
        
        # Analyze the plan
        echo ""
        echo "📊 Plan Analysis:"
        
        # Show plan summary
        if terraform show -json "$PLAN_FILE" >/dev/null 2>&1; then
            PLAN_JSON=$(terraform show -json "$PLAN_FILE" 2>/dev/null)
            
            # Count changes
            RESOURCES_TO_ADD=$(echo "$PLAN_JSON" | jq -r '.resource_changes[]? | select(.change.actions[]? == "create") | .address' 2>/dev/null | wc -l)
            RESOURCES_TO_CHANGE=$(echo "$PLAN_JSON" | jq -r '.resource_changes[]? | select(.change.actions[]? == "update") | .address' 2>/dev/null | wc -l)
            RESOURCES_TO_DESTROY=$(echo "$PLAN_JSON" | jq -r '.resource_changes[]? | select(.change.actions[]? == "delete") | .address' 2>/dev/null | wc -l)
            
            echo "  • Resources to add: $RESOURCES_TO_ADD"
            echo "  • Resources to change: $RESOURCES_TO_CHANGE"
            echo "  • Resources to destroy: $RESOURCES_TO_DESTROY"
            
            # Show resource details if any changes
            if [ "$RESOURCES_TO_ADD" -gt 0 ] || [ "$RESOURCES_TO_CHANGE" -gt 0 ] || [ "$RESOURCES_TO_DESTROY" -gt 0 ]; then
                echo ""
                echo "🔍 Detailed Changes:"
                
                if [ "$RESOURCES_TO_ADD" -gt 0 ]; then
                    echo "  📦 Resources to create:"
                    echo "$PLAN_JSON" | jq -r '.resource_changes[]? | select(.change.actions[]? == "create") | "    • " + .address' 2>/dev/null
                fi
                
                if [ "$RESOURCES_TO_CHANGE" -gt 0 ]; then
                    echo "  🔄 Resources to modify:"
                    echo "$PLAN_JSON" | jq -r '.resource_changes[]? | select(.change.actions[]? == "update") | "    • " + .address' 2>/dev/null
                fi
                
                if [ "$RESOURCES_TO_DESTROY" -gt 0 ]; then
                    echo "  🗑️ Resources to destroy:"
                    echo "$PLAN_JSON" | jq -r '.resource_changes[]? | select(.change.actions[]? == "delete") | "    • " + .address' 2>/dev/null
                fi
            else
                echo "  ℹ️ No infrastructure changes detected"
            fi
        fi
        
        # Clean up plan file
        rm -f "$PLAN_FILE"
        
    else
        echo "❌ Terraform plan failed"
        rm -f "$PLAN_FILE"
        exit 1
    fi
    
    # Additional analysis
    echo ""
    echo "🔍 Configuration Analysis:"
    
    # Count resources in current file
    RESOURCE_COUNT=$(grep -c '^resource ' "$TF_FILE" 2>/dev/null || echo 0)
    DATA_COUNT=$(grep -c '^data ' "$TF_FILE" 2>/dev/null || echo 0)
    VAR_COUNT=$(grep -c '^variable ' "$TF_FILE" 2>/dev/null || echo 0)
    OUTPUT_COUNT=$(grep -c '^output ' "$TF_FILE" 2>/dev/null || echo 0)
    
    echo "  • Resources defined: $RESOURCE_COUNT"
    echo "  • Data sources: $DATA_COUNT"
    echo "  • Variables: $VAR_COUNT"
    echo "  • Outputs: $OUTPUT_COUNT"
    
    # Check for common patterns
    if grep -q 'provider ' "$TF_FILE" 2>/dev/null; then
        echo "  • 🔌 Provider configurations detected"
    fi
    
    if grep -q 'module ' "$TF_FILE" 2>/dev/null; then
        echo "  • 📦 Module usage detected"
    fi
    
    if grep -q 'locals ' "$TF_FILE" 2>/dev/null; then
        echo "  • 🏷️ Local values defined"
    fi
    
    # Security and best practices check
    echo ""
    echo "🔒 Security Analysis:"
    
    if grep -i 'password\\|secret\\|key' "$TF_FILE" 2>/dev/null | grep -v 'var\.' | grep -v 'data\.' >/dev/null; then
        echo "  • ⚠️ Potential hardcoded secrets detected - use variables instead"
    fi
    
    if grep -q '0.0.0.0/0' "$TF_FILE" 2>/dev/null; then
        echo "  • ⚠️ Open security group rules detected (0.0.0.0/0)"
    fi
    
    if ! grep -q 'tags\\|Tags' "$TF_FILE" 2>/dev/null && [ "$RESOURCE_COUNT" -gt 0 ]; then
        echo "  • 💡 Consider adding resource tags for better management"
    fi
    
    echo ""
    echo "💡 Terraform Best Practices:"
    echo "  • Use terraform fmt to maintain consistent formatting"
    echo "  • Store sensitive values in variables, not hardcoded"
    echo "  • Use remote state backend for team collaboration"
    echo "  • Implement resource tagging strategy"
    echo "  • Use terraform validate in CI/CD pipelines"
    echo "  • Review plans carefully before applying"
    
    echo ""
    echo "🎯 Terraform plan execution complete!"
    
else
    echo "ℹ️ File is not a Terraform file: $FILE_PATH"
fi

exit 0

Terraform Plan Executor - Hook - Claude Pro Directory

Claude Code Setup

Configuration Paths

Requirements

Reviews (0)

Category

Source

Accessibility Checker

API Endpoint Documentation Generator

Auto Code Formatter Hook