diff --git a/.gitignore b/.gitignore
index bfc9577..fa3ef0c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,18 +1,19 @@
 # Local .terraform directories
 **/.terraform/*
 
-# .tfstate files
-*.tfstate
-*.tfstate.*
+# .tfstate files (VERY IMPORTANT: These contain secrets in plain text)
+*.tfstate*
 
-# Crash log files
+# Crash log files and plan files
 crash.log
+crash.*.log
+*.tfplan
 
 # Ignore any `.tfvars` files that are generated automatically for each Terraform
 # run. Most `.tfvars` files are managed as part of configuration and so should
 # be included in version control.
 #
-# example `.tfvars`
+# example `.tfvars` , `*.tfvars.json`
 
 # Ignore override files as they are usually used to override resources locally
 # and so are not checked in
@@ -33,3 +34,27 @@ override.tf.json
 /.vscode/
 *.lock.hcl
 .infracost
+
+# OS / misc
+.DS_Store
+
+# Terraform CLI config (may contain credentials)
+.terraform.rc
+terraform.rc
+
+# Terraform logs
+terraform.log
+
+# Cost estimation too, estimate cost of deployment before deployment https://github.com/infracost/infracost
+.infracost
+
+# Terragrunt (if used) https://terragrunt.com/
+.terragrunt-cache/
+
+# Generic backup files created by Editors
+*.backup
+*.bak
+
+# IMPORTANT:
+# Do NOT ignore this in most projects!
+# .terraform.lock.hcl
\ No newline at end of file