A method, including accessing a corpus or infrastructure as code modules including respective resource definitions for provisioning and deploying a plurality of computing resources configured to execute one or more software applications. A repository of validation rules are accessed that define respective acceptable configuration parameters for the resource definitions, and the validation rules are applied to the resource definitions so as to identify a first set of the resource definitions not in compliance with the validation rules and a second set of the resource definitions in compliance with the validation rules. A first resource definition not in compliance with a given validation rule is selected from the first set, and one or more second resource definitions are identified in the second set that are compliant with the given validation rule. Finally, the first and the second resource definitions are output together to invoke a revision of the first resource definition.