Kinda related: Is there a good tool for managing all these resources and credentials at AWS in an enterprise environment? We started nicely from top to down, splitting the root account into sub accounts and then having a terraform project per sub account. But now these terraform projects split themselves and start sharing their tfstate and i even saw circular references, as they try to share the variables to resources arns and so on. And policies are growing like crazy. It seems more like a mesh now.
Or is this the new normal?