alibabacloud-executing-plans

# Alibaba Cloud Executing Plans > **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE** > > This skill executes validated Terraform code via Alibaba Cloud IaC Service (remote execution). > It creates **real cloud resources** that cost money. Safety gates are non-negotiable. > > **ALL CLI operations MUST use MCP tool `AlibabaCloud___CallCLI`** — never use Bash to run `aliyun` commands directly. --- > **PREREQUISITE CHECK — MANDATORY** > > Before proceeding, verify BOTH prerequisites: > > 1. **Validation passed** — check `tasks/status.json` has `status: "validated"` (internal check, don't expose to user) > 2. **User explicitly confirmed** they want to execute > > If EITHER is missing, **STOP IMMEDIATELY**: > > - Not validated? → Invoke **alibabacloud:validate** first > - No user confirmation? → Ask user before proceeding --- ## Triggers Activate when: - User explicitly asks to execute/apply the Terraform plan - User confirms they want to proceed after validation passes **NEVER activate automatically.** This skill requires explicit user intent. ## Rules 1. **Single deploy approval, granted upstream** — The user authorizes deployment ONCE in `alibabacloud-validate`'s gate. Inside this skill the entire `plan → apply` chain runs automatically. Never add a second confirmation between plan and apply. 2. **Plan before apply, results always shown** — Always run terraform plan first AND surface its output to the user before apply. The user can interrupt mid-stream if the plan reve...