Thanks for sharing, interesting stuff! Just a quick thought, you are performing a terraform plan and then an apply with auto-approve. A better approach would be to output the plan to a file, enforce quality gates on this plan and then apply, specifying the plan in the command line. Great work though!