There is also a terraform provider. Not sure if there is a safe mode here. I normally test via ssh safe mode and import the changes afterwards.