Use a lockable state repository.

Also, make use of terraform workspaces.

eks/init.tf

@@ -0,0 +1,9 @@
+terraform {
+    backend "s3" {
+        bucket = "terraform-state-infra-aws-eks"
+        key = "global/s3/terraform.eks.tfstate"
+        region = "eu-west-3"
+        dynamodb_table = "terraform-state-locks-infra-aws-eks"
+        encrypt = true
+    }
+}