Resource-Based Apply Approvals

Summary: Introduce approval workflows that trigger based on resource type or operation (e.g., destroy).
Our infra is used by both DevOps and non-DevOps teams. They want safeguards for changes that impact sensitive resources like S3 bucket policies, IAM roles, RDS, EC2, etc.
Request:

• Block applies that include resource termination or modification of critical resources

• Allow applies only after manual approval by specific user groups

• Impact: Prevents critical mistakes by less experienced users.