HashiCorp
TERRAFORM-ASSOCIATE-003 · Question #143
Why does this backend configuration not follow best practices?
The correct answer is C. You should not store credentials in Terraform configuration. This is a bad practice, as it exposes your credentials to anyone who can access your configuration files or state files. You should use environment variables, credential files, or other mechanisms to provide credentials to Terraform.
Implement and maintain state
Question
Why does this backend configuration not follow best practices?
Exhibit
Options
- AAn alias meta-argument should be included in backend blocks whenever possible
- BYou should use the local enhanced storage backend whenever possible
- CYou should not store credentials in Terraform configuration
- DThe backend configuration should contain multiple credentials so that more than one user can
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C78% (25)
- D13% (4)
Explanation
This is a bad practice, as it exposes your credentials to anyone who can access your configuration files or state files. You should use environment variables, credential files, or other mechanisms to provide credentials to Terraform.
Topics
#backend configuration#credentials security#best practices#sensitive data
Community Discussion
No community discussion yet for this question.
