terraform-plan.yaml

name: Write Terraform Plan to Pull Request

on:
  pull_request:
    branches:
      - main  # or any other branch you want to trigger the deployment
    paths: 
      - '**/*.tf'

jobs:
  terraform-plan:
    name: Terraform Plan
    runs-on: ubuntu-latest
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    permissions:
      contents: read
      pull-requests: write

    steps:
    - name: Checkout code
      uses: actions/checkout@v4
    - name: Configure AWS Credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: us-west-2 

    - name: Terraform Plan
      uses: dflook/terraform-plan@v1
      with:
        path: terraform
        backend_config_file: terraform/prod.backend.tfvars