diff --git a/ops/platform/root.tofu.tf b/ops/platform/root.tofu.tf
index ed70b04b1d..deb4a4f165 100644
--- a/ops/platform/root.tofu.tf
+++ b/ops/platform/root.tofu.tf
@@ -8,17 +8,21 @@ locals {
   # handled by the Terraservice module.
   account_type = coalesce(var.account_type, one([for x in local.account_types : x if x == terraform.workspace]))
 
+  # This is just a breadcrum - helper variable that is not actually used in code but helps in tracking whether or not we are including this tf.
+  # tflint-ignore: terraform_unused_declarations
   _canary_exists = module.terraservice.canary
 }
 
 variable "region" {
   default  = "us-east-1"
   nullable = false
+  type     = string
 }
 
 variable "secondary_region" {
   default  = "us-west-2"
   nullable = false
+  type     = string
 }
 
 variable "account_type" {
@@ -36,6 +40,7 @@ variable "account_type" {
   }
 }
 
+# tflint-ignore: terraform_required_providers
 provider "aws" {
   region = var.region
   default_tags {
@@ -43,6 +48,7 @@ provider "aws" {
   }
 }
 
+# tflint-ignore: terraform_required_providers, terraform_unused_declarations
 provider "aws" {
   alias = "secondary"
 
@@ -52,6 +58,7 @@ provider "aws" {
   }
 }
 
+# tflint-ignore: terraform_required_version
 terraform {
   backend "s3" {
     bucket       = "bfd-platform-${local.account_type}-tf-state"
diff --git a/ops/services/root.tofu.tf b/ops/services/root.tofu.tf
index 70410d4349..b0f1924958 100644
--- a/ops/services/root.tofu.tf
+++ b/ops/services/root.tofu.tf
@@ -9,17 +9,21 @@ locals {
     "invalid-parent-env"
   )
 
+  # This is just a breadcrum - helper variable that is not actually used in code but helps in tracking whether or not we are including this tf.
+  # tflint-ignore: terraform_unused_declarations
   _canary_exists = module.terraservice.canary
 }
 
 variable "region" {
   default  = "us-east-1"
   nullable = false
+  type     = string
 }
 
 variable "secondary_region" {
   default  = "us-west-2"
   nullable = false
+  type     = string
 }
 
 variable "parent_env" {
@@ -37,6 +41,7 @@ variable "parent_env" {
   }
 }
 
+# tflint-ignore: terraform_required_providers
 provider "aws" {
   region = var.region
   default_tags {
@@ -44,6 +49,7 @@ provider "aws" {
   }
 }
 
+# tflint-ignore: terraform_required_providers, terraform_unused_declarations
 provider "aws" {
   alias = "secondary"
 
@@ -54,6 +60,7 @@ provider "aws" {
 }
 
 terraform {
+  required_version = "~> 1.6"
   backend "s3" {
     bucket       = "bfd-${local.parent_env}-tf-state"
     key          = "ops/services/${local.service}/tofu.tfstate"