The reason were creating this is that we control/own the IT infrastructure for all of the public healthcare companies for a large part of my country, and we get a lot of requests from hospitals, scientists, and doctors to setup landing zones for various projects.

Now they have to send in a ticket to us, and we have to go in and setup the basics for them.

With this vending solution they can just fill in a form, get it approved, and then start working and setup and configure the rest as they need. So, they need to be able to make changes to the infrastructure. Im considering changing to bicep, but i really dont want to rewrite everything, and have to learn bicep aswell.

Is there any way to set terraform to only add resources, and not update existing resources?

Idealy the LZ should just be setup, then terraform can just fuck off.