Super simple, just grabs env variables from secrets, displays meaningful error messages when they're not set, and runs terraform init and apply