Terraform plan scan - execute only relevant queries

[roi-orca]

When running a scan on a 9MB terraform plan file from a post-plan event, the scan takes more than 20 minutes due to the large number of queries that are executed, which results in run-task failure due to terraform cloud timeout.

In order to improve the scan time, we would like to limit the number of queries that are executed. An option is to run only the relevant queries for the terraform provider/vendor (aws, gcp, etc..) and the common queries that should always run on terraform plan scan.

[lior-orca]

@cxMiguelSilva what do you think of the optimization above?

[cxMiguelSilva]

Hi @lior-orca & @roi-orca, Are you suggesting the addition of scan parameters to behave like the scan flag --cloud-provider?

[lior-orca]

@cxMiguelSilva not really.

We suggest giving terraform plans "special attention" by identifying the cloud provider, and by then executing only the relevant queries (common + cloud provider specific queries, e.g. aws) By that, we expect to have large performance improvement.

[cxMiguelSilva]

Ok, we will take a look at that and come back to you once we have added this feature.