Air France-KLM transformed its infrastructure automation by integrating Terraform, Vault, and Ansible, shifting from a compliance-by-construction model to compliance-by-guardrails. This change was necessary for scaling their operations, which support multiple airlines and complex IT requirements. They faced challenges with a legacy system that included over 350 pre-approved services. Managing this extensive catalog became cumbersome and costly, hampering flexibility and slowing down product teams needing custom solutions. By adopting Terraform Enterprise, Air France-KLM streamlined its approach. The team moved towards a declarative infrastructure model that allowed for broader multi-cloud support and standardized workflows across various environments. Instead of creating rigid, individual services, they developed reusable Terraform modules that incorporated centralized compliance logic expressed as policy as code. This shift enabled them to enforce naming conventions and configuration parameters consistently across all workspaces, significantly reducing operational errors and provisioning times. The results were impressive. Provisioning time dropped from hours or days to just minutes, and they achieved near-zero environment drift. Security became embedded in the design process rather than added later. Productivity improved as the platform teams could focus on high-value tasks instead of repetitive ones, ultimately leading to reduced errors and faster deployment times.