nerdexam
HashiCorp

TERRAFORM-ASSOCIATE-003 · Question #143

Why does this backend configuration not follow best practices?

The correct answer is C. You should not store credentials in Terraform configuration. This is a bad practice, as it exposes your credentials to anyone who can access your configuration files or state files. You should use environment variables, credential files, or other mechanisms to provide credentials to Terraform.

Implement and maintain state

Question

Why does this backend configuration not follow best practices?

Exhibit

TERRAFORM-ASSOCIATE-003 question #143 exhibit

Options

  • AAn alias meta-argument should be included in backend blocks whenever possible
  • BYou should use the local enhanced storage backend whenever possible
  • CYou should not store credentials in Terraform configuration
  • DThe backend configuration should contain multiple credentials so that more than one user can

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    78% (25)
  • D
    13% (4)

Explanation

This is a bad practice, as it exposes your credentials to anyone who can access your configuration files or state files. You should use environment variables, credential files, or other mechanisms to provide credentials to Terraform.

Topics

#backend configuration#credentials security#best practices#sensitive data

Community Discussion

No community discussion yet for this question.

Full TERRAFORM-ASSOCIATE-003 Practice