Format

• written questions
• practical HCL task
• review of a risky Terraform scenario
• short operations and security assessment

Expected Answer Profile

A good answer explains not only syntax, but supports behavior with provider, state, backend and plan considerations. Security-relevant decisions must be justified.

Questions

Solution 01

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for classify IaC and Terraform.

Solution 02

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for read and structure HCL files.

Solution 03

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for declare provider requirements.

Solution 04

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for review provider versions and lock files.

Solution 05

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for distinguish resources and data sources.

Solution 06

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for model variables, locals and outputs.

Solution 07

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for run the Terraform workflow.

Solution 08

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for review plan diffs.

Solution 09

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for explain state bindings.

Solution 10

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for design backends and locking.

Solution 11

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for shape modules with inputs and outputs.

Solution 12

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for apply for_each, count and dynamic blocks.

Solution 13

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for evaluate lifecycle meta-arguments.

Solution 14

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for differentiate workspaces and environment layouts.

Solution 15

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for plan imports and moved blocks.

Solution 16

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for use remote state responsibly.

Solution 17

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for make CI/CD plan artifacts reviewable.

Solution 18

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for model policy as code as a gate.

Solution 19

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for protect secrets and sensitive values.

Solution 20

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for detect and handle drift.

Solution 21

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for classify HCP Terraform and Terraform Enterprise.

Solution 22

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for review supply-chain risks from providers and modules.

Solution 23

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for plan destroy protection and recovery.

Solution 24

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for run incident response for state or credential leaks.

Solution 25

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for classify IaC and Terraform.

Solution 26

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for read and structure HCL files.

Solution 27

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for declare provider requirements.

Solution 28

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for review provider versions and lock files.

Solution 29

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for distinguish resources and data sources.

Solution 30

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for model variables, locals and outputs.

Solution 31

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for run the Terraform workflow.

Solution 32

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for review plan diffs.

Solution 33

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for explain state bindings.

Solution 34

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for design backends and locking.

Solution 35

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for shape modules with inputs and outputs.

Solution 36

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for apply for_each, count and dynamic blocks.

Solution 37

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for evaluate lifecycle meta-arguments.

Solution 38

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for differentiate workspaces and environment layouts.

Solution 39

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for plan imports and moved blocks.

Solution 40

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for use remote state responsibly.

Solution 41

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for make CI/CD plan artifacts reviewable.

Solution 42

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for model policy as code as a gate.

Solution 43

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for protect secrets and sensitive values.

Solution 44

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for detect and handle drift.

Solution 45

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for classify HCP Terraform and Terraform Enterprise.

Solution 46

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for review supply-chain risks from providers and modules.

Solution 47

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for plan destroy protection and recovery.

Solution 48

Expected: name desired state, review provider requirement, explain state impact, evaluate backend risk and provide concrete evidence for run incident response for state or credential leaks.

Practical Task

Create a small root module with variables, locals, resources, output, provider pinning and review note. Add backend and recovery assessment.

Review Checklist for Advanced Security

• 01. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 02. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 03. explain state impact: Record the affected module, provider, resource, state and backend path.
• 04. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 05. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 06. review module boundary: Record the affected module, provider, resource, state and backend path.
• 07. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 08. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 09. mark secret risk: Record the affected module, provider, resource, state and backend path.
• 10. name policy or CI gate: Record the affected module, provider, resource, state and backend path.
• 11. record rollback or recovery path: Record the affected module, provider, resource, state and backend path.
• 12. write team rule: Record the affected module, provider, resource, state and backend path.
• 13. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 14. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 15. explain state impact: Record the affected module, provider, resource, state and backend path.
• 16. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 17. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 18. review module boundary: Record the affected module, provider, resource, state and backend path.
• 19. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 20. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 21. mark secret risk: Record the affected module, provider, resource, state and backend path.
• 22. name policy or CI gate: Record the affected module, provider, resource, state and backend path.
• 23. record rollback or recovery path: Record the affected module, provider, resource, state and backend path.
• 24. write team rule: Record the affected module, provider, resource, state and backend path.
• 25. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 26. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 27. explain state impact: Record the affected module, provider, resource, state and backend path.
• 28. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 29. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 30. review module boundary: Record the affected module, provider, resource, state and backend path.
• 31. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 32. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 33. mark secret risk: Record the affected module, provider, resource, state and backend path.
• 34. name policy or CI gate: Record the affected module, provider, resource, state and backend path.
• 35. record rollback or recovery path: Record the affected module, provider, resource, state and backend path.
• 36. write team rule: Record the affected module, provider, resource, state and backend path.
• 37. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 38. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 39. explain state impact: Record the affected module, provider, resource, state and backend path.
• 40. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 41. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 42. review module boundary: Record the affected module, provider, resource, state and backend path.
• 43. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 44. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 45. mark secret risk: Record the affected module, provider, resource, state and backend path.

Practice Appendix: Advanced Security

This appendix is a working backlog for longer trainings, reviews and repetitions. Each task can be checked locally with HCL artifacts and a Git repository.

A001. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A002. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A003. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A004. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A005. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A006. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A007. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A008. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A009. Terraform

• Task: mark secret risk and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A010. Review

• Task: name policy or CI gate and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A011. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A012. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A013. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A014. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A015. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A016. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A017. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A018. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A019. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A020. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A021. Terraform

• Task: mark secret risk and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A022. Review

• Task: name policy or CI gate and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A023. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A024. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A025. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A026. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A027. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A028. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A029. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A030. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A031. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A032. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A033. Terraform

• Task: mark secret risk and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A034. Review

• Task: name policy or CI gate and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A035. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A036. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A037. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A038. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A039. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A040. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A041. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A042. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A043. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A044. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A045. Terraform

• Task: mark secret risk and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A046. Review

• Task: name policy or CI gate and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A047. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A048. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A049. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A050. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A051. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A052. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A053. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A054. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A055. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A056. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A057. Terraform

• Task: mark secret risk and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A058. Review

• Task: name policy or CI gate and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A059. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A060. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A061. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A062. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A063. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A064. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A065. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A066. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A067. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A068. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A069. Terraform

• Task: mark secret risk and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A070. Review

• Task: name policy or CI gate and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A071. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A072. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A073. Terraform

• Task: document configuration and target state and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A074. Review

• Task: review provider requirement and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A075. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A076. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A077. Terraform

• Task: describe backend and locking model and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A078. Review

• Task: review module boundary and connect the observation explicitly to Review.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A079. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A080. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.