[mikegreen]

I'm hoping that Infracost doesn't need the entire state file shipped to an outside service/server, like the one mentioned here does.

State files should be considered secret....

  $ terraform state pull | curl -s -X POST -H "Content-Type: application/json" -d @- https://cost.modules.tf/

[dastx]

They have a jq script[0] that removes everything but the necessary data for the cost estimation.

[0] https://github.com/antonbabenko/terraform-cost-estimation/bl...

[aliscott]

Agree, state files can contain sensitive information. We parse the Terraform client side and only send the details to the API that are needed to determine the price, i.e. the instance type, region, etc.