AI can generate a Terraform module, a Bicep template, or an entire Landing Zone scaffold in seconds. It looks right and deploys. That is exactly where the danger begins.

The misconfigured resources quietly drain budgets. The compliance gaps that slip through code review are due to the code appearing authoritative. The drift between what AI generates and what the environment actually needs was discovered six weeks later in production.

And when AI agents with MCP servers enter the picture, the stakes go even higher. Something is authenticating to your environment, making decisions, and applying changes. The blast radius is no longer a human typo. It's an autonomous process that was never asked the right questions.

This session is about those questions. The ones that don't show up in demos. The ones that separate teams that adopt AI-assisted IaC carefully from those that adopt it quickly.