True or False? When using the Terraform provider for Vault, the tight integration between these HashiCorp tools provides the ability to mask secrets in the terraform plan and state files.

The correct answer is A. False. Currently, Terraform has no mechanism to redact or protect secrets that are returned via data sources, so secrets read via this provider will be persisted into the Terraform state, into any plan files, and in some cases in the console output produced while planning and…

Implement and maintain state

Question

Options

AFalse
BTrue

How the community answered

(27 responses)

A
89% (24)
B
11% (3)

Explanation

Currently, Terraform has no mechanism to redact or protect secrets that are returned via data sources, so secrets read via this provider will be persisted into the Terraform state, into any plan files, and in some cases in the console output produced while planning and applying. These artifacts must, therefore, all be protected accordingly.

Topics

#Terraform state security#Secrets management#Terraform plan security#Vault integration

Community Discussion

No community discussion yet for this question.

Full TA-002-P Practice