Refactor deployment workflow to reorder jobs and enhance Terraform planning

- Moved the `terraform-plan` job to depend on the `build-and-push-recordprocessor` job, ensuring a more logical sequence in the deployment process.
- Retained the steps for AWS connection, Terraform initialization, and planning within the `terraform-plan` job, maintaining infrastructure management integrity.
- Removed the previous `terraform-plan` job definition to streamline the workflow.

Author: Thomas-Boyle

.github/workflows/deploy-backend.yml

@@ -51,53 +51,11 @@ env: # Sonarcloud - do not allow direct usage of untrusted data
 run-name: Deploy Backend - ${{ inputs.environment }} ${{ inputs.sub_environment }}
 
 jobs:
-  terraform-plan:
-    permissions:
-      id-token: write
-      contents: read
-    runs-on: ubuntu-latest
-    env:
-      TF_VAR_recordprocessor_image_tag: ${{ github.sha }}
-    environment:
-      name: ${{ inputs.environment }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
-
-      - name: Connect to AWS
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7
-        with:
-          aws-region: eu-west-2
-          role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT_ID }}:role/auto-ops
-          role-session-name: github-actions
-
-      - uses: hashicorp/setup-terraform@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85
-        with:
-          terraform_version: "1.12.2"
-
-      - name: Terraform Init
-        working-directory: infrastructure/instance
-        run: make init
-
-      - name: Terraform Plan
-        # Ignore cancellations to prevent Terraform from being killed while it holds a state lock
-        # A stuck process can still be killed with the force-cancel API operation
-        if: ${{ !failure() }}
-        working-directory: infrastructure/instance
-        run: make plan-ci
-
-      - name: Save Terraform Plan
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
-        with:
-          name: ${{ env.ENVIRONMENT }}-${{ env.SUB_ENVIRONMENT }}-tfplan
-          path: infrastructure/instance/tfplan
-
   build-and-push-recordprocessor:
     permissions:
       id-token: write
       contents: read
     name: Build and push recordprocessor image
-    needs: terraform-apply
     runs-on: ubuntu-latest
 
     environment:
@@ -134,6 +92,48 @@ jobs:
           docker build -f recordprocessor/Dockerfile -t "${IMAGE_URI}" .
           docker push "${IMAGE_URI}"
 
+  terraform-plan:
+    permissions:
+      id-token: write
+      contents: read
+    needs: build-and-push-recordprocessor
+    runs-on: ubuntu-latest
+    env:
+      TF_VAR_recordprocessor_image_tag: ${{ github.sha }}
+    environment:
+      name: ${{ inputs.environment }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+
+      - name: Connect to AWS
+        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7
+        with:
+          aws-region: eu-west-2
+          role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT_ID }}:role/auto-ops
+          role-session-name: github-actions
+
+      - uses: hashicorp/setup-terraform@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85
+        with:
+          terraform_version: "1.12.2"
+
+      - name: Terraform Init
+        working-directory: infrastructure/instance
+        run: make init
+
+      - name: Terraform Plan
+        # Ignore cancellations to prevent Terraform from being killed while it holds a state lock
+        # A stuck process can still be killed with the force-cancel API operation
+        if: ${{ !failure() }}
+        working-directory: infrastructure/instance
+        run: make plan-ci
+
+      - name: Save Terraform Plan
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
+        with:
+          name: ${{ env.ENVIRONMENT }}-${{ env.SUB_ENVIRONMENT }}-tfplan
+          path: infrastructure/instance/tfplan
+
   terraform-apply:
     permissions:
       id-token: write