I dropped a Terraform file into a scanner and didn’t expect this result

I tested a Terraform setup that looked completely fine.

No errors.
No warnings.
Everything deployed successfully.

But the scan showed something else:

– Public database access
– Open SSH to the world
– Public S3 bucket

None of this broke the system.

That’s what surprised me.

Most cloud issues don’t cause failures — they quietly expose your infrastructure.

I’ve been experimenting with a tool to surface these risks automatically from .tf files.

Still early, but this result made me rethink how “safe” a setup really is.

Curious how others here are catching these kinds of issues before production.