Purpose

This example is a controlled Terraform lab. It contains HCL artifacts, a local module, test data and a run.sh that performs static checks and evidence generation.

Local Check

./run.sh

Learning Goals

• trace Terraform configuration
• review provider requirements
• explain state and backend impact
• inspect evidence files
• derive review rules

Files

• versions.tf
• main.tf
• variables.tf
• outputs.tf
• scenario.json

Review Checklist for Backend Configuration

• 01. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 02. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 03. explain state impact: Record the affected module, provider, resource, state and backend path.
• 04. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 05. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 06. review module boundary: Record the affected module, provider, resource, state and backend path.
• 07. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 08. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 09. mark secret risk: Record the affected module, provider, resource, state and backend path.
• 10. name policy or CI gate: Record the affected module, provider, resource, state and backend path.
• 11. record rollback or recovery path: Record the affected module, provider, resource, state and backend path.
• 12. write team rule: Record the affected module, provider, resource, state and backend path.
• 13. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 14. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 15. explain state impact: Record the affected module, provider, resource, state and backend path.
• 16. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 17. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 18. review module boundary: Record the affected module, provider, resource, state and backend path.
• 19. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 20. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 21. mark secret risk: Record the affected module, provider, resource, state and backend path.
• 22. name policy or CI gate: Record the affected module, provider, resource, state and backend path.
• 23. record rollback or recovery path: Record the affected module, provider, resource, state and backend path.
• 24. write team rule: Record the affected module, provider, resource, state and backend path.
• 25. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 26. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 27. explain state impact: Record the affected module, provider, resource, state and backend path.
• 28. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 29. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 30. review module boundary: Record the affected module, provider, resource, state and backend path.
• 31. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 32. produce drift evidence: Record the affected module, provider, resource, state and backend path.
• 33. mark secret risk: Record the affected module, provider, resource, state and backend path.
• 34. name policy or CI gate: Record the affected module, provider, resource, state and backend path.
• 35. record rollback or recovery path: Record the affected module, provider, resource, state and backend path.
• 36. write team rule: Record the affected module, provider, resource, state and backend path.
• 37. document configuration and target state: Record the affected module, provider, resource, state and backend path.
• 38. review provider requirement: Record the affected module, provider, resource, state and backend path.
• 39. explain state impact: Record the affected module, provider, resource, state and backend path.
• 40. evaluate plan diff: Record the affected module, provider, resource, state and backend path.
• 41. describe backend and locking model: Record the affected module, provider, resource, state and backend path.
• 42. review module boundary: Record the affected module, provider, resource, state and backend path.
• 43. evaluate variable and output: Record the affected module, provider, resource, state and backend path.
• 44. produce drift evidence: Record the affected module, provider, resource, state and backend path.

Practice Appendix: Backend Configuration

This appendix is a working backlog for longer trainings, reviews and repetitions. Each task can be checked locally with HCL artifacts and a Git repository.

A001. Backend-Blöcke, Partial Configuration und Migration

• Task: document configuration and target state and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A002. Terraform

• Task: review provider requirement and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A003. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A004. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A005. Backend-Blöcke, Partial Configuration und Migration

• Task: describe backend and locking model and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A006. Terraform

• Task: review module boundary and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A007. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A008. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A009. Backend-Blöcke, Partial Configuration und Migration

• Task: mark secret risk and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A010. Terraform

• Task: name policy or CI gate and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A011. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A012. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A013. Backend-Blöcke, Partial Configuration und Migration

• Task: document configuration and target state and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A014. Terraform

• Task: review provider requirement and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A015. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A016. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A017. Backend-Blöcke, Partial Configuration und Migration

• Task: describe backend and locking model and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A018. Terraform

• Task: review module boundary and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A019. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A020. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A021. Backend-Blöcke, Partial Configuration und Migration

• Task: mark secret risk and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A022. Terraform

• Task: name policy or CI gate and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A023. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A024. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A025. Backend-Blöcke, Partial Configuration und Migration

• Task: document configuration and target state and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A026. Terraform

• Task: review provider requirement and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A027. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A028. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A029. Backend-Blöcke, Partial Configuration und Migration

• Task: describe backend and locking model and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A030. Terraform

• Task: review module boundary and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A031. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A032. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A033. Backend-Blöcke, Partial Configuration und Migration

• Task: mark secret risk and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A034. Terraform

• Task: name policy or CI gate and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A035. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A036. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A037. Backend-Blöcke, Partial Configuration und Migration

• Task: document configuration and target state and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A038. Terraform

• Task: review provider requirement and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A039. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A040. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A041. Backend-Blöcke, Partial Configuration und Migration

• Task: describe backend and locking model and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A042. Terraform

• Task: review module boundary and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A043. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A044. Security

• Task: produce drift evidence and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A045. Backend-Blöcke, Partial Configuration und Migration

• Task: mark secret risk and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A046. Terraform

• Task: name policy or CI gate and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A047. State

• Task: record rollback or recovery path and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A048. Security

• Task: write team rule and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A049. Backend-Blöcke, Partial Configuration und Migration

• Task: document configuration and target state and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A050. Terraform

• Task: review provider requirement and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A051. State

• Task: explain state impact and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A052. Security

• Task: evaluate plan diff and connect the observation explicitly to Security.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A053. Backend-Blöcke, Partial Configuration und Migration

• Task: describe backend and locking model and connect the observation explicitly to Backend-Blöcke, Partial Configuration und Migration.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A054. Terraform

• Task: review module boundary and connect the observation explicitly to Terraform.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.

A055. State

• Task: evaluate variable and output and connect the observation explicitly to State.
• Evidence: Record at least one Terraform-related command, expected output and a boundary of that evidence.
• Operations question: What would a wrong assumption cause in dev, staging, prod and CI?
• Security question: Which credentials, state values, provider versions or outputs would be critical?
• Recovery: Describe whether revert, state operation, import, backend restore, secret rotation or manual provider correction would be needed.