Design a production-grade CI/CD pipeline for Terraform. Discuss plan and apply separation, approval gates, drift detection, security scanning, and handling secrets in pipelines.

Sample answer preview

A production-grade Terraform CI/CD pipeline automates infrastructure changes while maintaining safety, security, and auditability. The pipeline must balance speed of delivery with the risk inherent in modifying production infrastructure.