HashiCorp
TA-002-P · Question #55
Which of these is the best practice to protect sensitive values in state files?
The correct answer is C. Enhanced remote backends. Use of remote backends and especially the availability of Terraform Cloud, there are now a variety of backends that will encrypt state at rest and will not store the state in cleartext on machines running.
Implement and maintain state
Question
Which of these is the best practice to protect sensitive values in state files?
Options
- ABlockchain
- BSecure Sockets Layer (SSL)
- CEnhanced remote backends
- DSigned Terraform providers
How the community answered
(43 responses)- A2% (1)
- C95% (41)
- D2% (1)
Explanation
Use of remote backends and especially the availability of Terraform Cloud, there are now a variety of backends that will encrypt state at rest and will not store the state in cleartext on machines running.
Topics
#Terraform state security#Sensitive values#Remote backends#State management
Community Discussion
No community discussion yet for this question.