HCP Terraform: Teams, Policies, Health Checks and Dynamic Credentials 🔧 HCP Terraform ⭐ Advanced Sentinel / OPA Workspace Health Dynamic Credentials (OIDC) Teams & Permissions Scenario Your organization is rolling out HCP Terraform to all engineering teams. You need to…

HCP Terraform: Cloud Block, Login and Remote Runs 🔧 HCP Terraform ⭐ Intermediate cloud {} block terraform login CLI-Driven Runs Variable Sets Scenario Your team wants to move from a DIY S3 backend to HCP Terraform (formerly Terraform Cloud). HCP…

Taint, Replace and Drift Detection 🔧 Terraform Core ⭐ Intermediate taint (deprecated) -replace plan -refresh-only Drift Detection Scenario An EC2 instance is misbehaving and you want to force Terraform to destroy and recreate it on the next apply. You also…

Sensitive Variables: Protecting Secrets in Terraform 🔧 Terraform Core ⭐ Intermediate sensitive = true TF_VAR_* Sensitive Outputs State File Security Scenario Your configuration needs a database password and an API key. You must ensure these values are never shown in…

Debugging: TF_LOG, Console, Validate and Format 🔧 Terraform Core ⭐ Beginner TF_LOG TF_LOG_PATH terraform console terraform validate terraform fmt Scenario Your terraform plan is failing with a cryptic error. You need to see detailed logs, test expressions interactively, check syntax,…

Workspaces: Managing Multiple Environments 🔧 Terraform Core ⭐ Intermediate workspace terraform.workspace State Isolation Scenario You have one Terraform config that you want to use for dev, staging, and prod. Workspaces give you separate state files per environment while sharing the…

moved Blocks: Refactoring Without Destroy/Recreate 🔧 Terraform Core ⭐ Intermediate moved from / to Refactoring Scenario You renamed a resource from aws_s3_bucket.data to aws_s3_bucket.app_data. Without a moved block, Terraform would destroy the old bucket and create a new one. The…