Terraform Azurerm Set Diff Analyzer

The terraform-azurerm-set-diff-analyzer skill identifies false-positive diffs in Terraform plans for Azure resources caused by Set-type attribute reordering, helping infrastructure engineers distinguish spurious changes from actual modifications. It solves the problem where adding or removing a single element in resources like Application Gateways, Load Balancers, and NSGs causes Terraform to report all elements as changed, making plan reviews difficult and error-prone. The skill uses Python to analyze Terraform plan JSON output and filter out order-only changes while preserving genuine resource modifications.

skills.sh installs: 8.9K
GitHub stars: 41K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add github/awesome-copilot --skill terraform-azurerm-set-diff-analyzer --agent claude-code

Installs into .claude/skills of the current project.

Files

Terraform AzureRM Set Diff Analyzer

A skill to identify "false-positive diffs" in Terraform plans caused by AzureRM Provider's Set-type attributes and distinguish them from actual changes.

When to Use

terraform plan shows many changes, but you only added/removed a single element
Application Gateway, Load Balancer, NSG, etc. show "all elements changed"
You want to automatically filter false-positive diffs in CI/CD

Background

Terraform's Set type compares by position rather than by key, so when adding or removing elements, all elements appear as "changed". This is a general Terraform issue, but it's particularly noticeable with AzureRM resources that heavily use Set-type attributes like Application Gateway, Load Balancer, and NSG.

These "false-positive diffs" don't actually affect the resources, but they make reviewing terraform plan output difficult.