Treat modules as internal products
Inputs, outputs, supported versions, examples and upgrade behaviour should be documented.
Put policy in code and pipeline
Static checks, security scanning, plan review and protected deployment identities reduce unsafe changes.
Assign ownership
A small set of governed modules is usually more supportable than many near-duplicates.
AL Group can assess, design, implement and operate the underlying technology rather than stopping at advice.
Talk to an engineer