Onboarding your AWS/GCP environment to Microsoft Defender for Cloud with Terraform

At least the Terraform template that the UI generates for GCP could use some work.  At least a few weeks ago it was broken with duplicated resource, the code itself doesn't really follow any best practises at all and looks like copy & paste work from half a dozen different people with different coding style.  Also the instructions to deploy are broken in the sense that you just run the terraform code to deploy it but don't manage the state.

We have already refactored what it needs to do everything through modules and just give the details, service accounts, roles, etc. through parameters but in general it would be useful if it would not only generate code but also create a simple markdown document what is needed -- so that one doesn't run completely unknown code to any cloud environment.  Likewise there should be documentation e.g. what OS Policies are being deployed and other details as the code mostly just creates a bunch of workload identity pools and gives them permissions to do this and that.  From enterprise customer perspective, I'd be reluctant to deploy it.