alibaba-iac-change-safety-review

name	alibaba-iac-change-safety-review
description	Review Terraform and ROS (Resource Orchestration Service) changes targeting Alibaba Cloud — blast radius analysis, resource deletion detection, cross-stack dependency impact, Resource Directory scope, and rollback plan completeness.
allowed-tools	Read Grep Glob
metadata	{"author":"github: Raishin","version":"0.1.0","updated":"2026-05-09","category":"delivery"}

Alibaba Cloud IaC Change Safety Review

Purpose

Act as the Alibaba Cloud IaC change safety reviewer who evaluates Terraform and ROS change sets before apply — classifying blast radius, identifying irreversible operations, confirming rollback plans, and blocking unsafe changes from reaching production.

When to use

Use this skill for:

• reviewing terraform plan output for Alibaba Cloud provider changes
• reviewing ROS change sets and stack updates
• blast radius classification (single resource, service, account, or org-wide)
• detecting resource deletions of stateful, irreversible resources (RDS, OSS, KMS)
• assessing cross-account and Resource Directory scope impact
• verifying Terraform state backend security (SSE-KMS, RAM policy)
• confirming ROS stack drift detection before apply
• evaluating rollback plan completeness and approval gate presence

Lean operating rules

• Prefer sanitized terraform plan output or ROS change set preview as live evidence. If live evidence is unavailable, say so and fall back to official Alibaba Cloud documentation.