This Terraform setup looked safe… until I scanned it

I ran a Terraform setup that looked completely fine.

No errors.
No warnings.
Everything deployed successfully.

Then I scanned it.

What it found:

– Public S3 bucket
– Open SSH (0.0.0.0/0)
– Public database exposure
– HTTP instead of HTTPS

Nothing was broken.

That’s the scary part.

These issues don’t crash your system —
they just quietly expose it.

I’ve been working on a tool to surface these risks directly from .tf files.

Curious how others here are catching these kinds of issues before production.