You want to use API tokens and other secrets within your team's Terraform workspaces. Where does HashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

The correct answer is A. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked. B. In HashiCorp Vault. C. In a terraform.tfvars file, securely managed and shared with your team. Sensitive values such as API tokens should be stored in a secure way, either in Terraform Cloud variables marked as sensitive or in HashiCorp Vault. Storing secrets in version control systems or plaintext files is not recommended.

Understand HCP Terraform Capabilities

Question

Options

AIn an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.
BIn HashiCorp Vault.
CIn a terraform.tfvars file, securely managed and shared with your team.
DIn a terraform.tfvars file, checked into your version control system.
EIn a plaintext document on a shared drive.

How the community answered

(44 responses)

A
84% (37)
D
5% (2)
E
11% (5)

Explanation

Sensitive values such as API tokens should be stored in a secure way, either in Terraform Cloud variables marked as sensitive or in HashiCorp Vault. Storing secrets in version control systems or plaintext files is not recommended.

Topics

#secrets management#HCP Terraform variables#HashiCorp Vault#sensitive values

Community Discussion

No community discussion yet for this question.

Full TERRAFORM-ASSOCIATE-003 Practice