Running Terraform in continuous integration automates change control: fmt -check and validate on every change, plan published for review on a merge request, then apply after approval. Credentials are provided by the platform and the state is in a remote backend.