Terraform Applied Successfully. Did the AI Agent's Change Actually Work?

Part 2 of 3 in "Terraform with an AI co-worker: access, testing, review".

Part 1 is here .

The task looked small: create an S3 bucket, two SQS queues and a service user across four test environments and production. An AI agent was doing the work.

Before deploying, it ran Terraform plans. In two test environments, those plans included other teams' access keys, permission changes and the deletion of two empty S3 folder markers. None of that belonged to our task.

That was the first useful result of testing, before we had deployed anything. Later, the agent would upload real objects, deliberately trigger access denials, and discover that some of its own checks were wrong.

In Part 1, I covered how we restricted the agent's AWS access. This part is about the evidence I wanted before accepting its work as done.

The plan included someone else's work

A Terraform plan previews proposed changes.…