Terraform Interview Questions — All Categories
31 questions tagged with Terraform as a technology, across every category it appears in
Should GitOps principles apply to your underlying cluster/infrastructure configuration, or just to application deployments? What's actually different about managing infrastructure this way?
IntermediateGitOpsTerraformKubernetes6 min
How would you design scheduled Terraform drift detection so it alerts the right team without becoming noise nobody reads?
AdvancedTerraform8 min
Someone manually changed a cloud resource in the console that's managed by your IaC. What actually happens the next time the pipeline runs, and how would you handle the drift?
IntermediateTerraform8 min
How does the severity of infrastructure drift change for a stateful resource like a database, versus a stateless one like a security group rule?
IntermediateTerraform6 min
What's the risk of using terraform apply -target to fix drift on just one resource, and when is it actually the right call?
IntermediateTerraform6 min
What does idempotency actually mean for infrastructure-as-code tooling, and what breaks when a module isn't genuinely idempotent?
IntermediateTerraform6 min
Your team writes automated tests for application code as a matter of course, but your Terraform modules have none. How would you introduce testing for infrastructure code?
IntermediateTerraform7 min
How would you actually decide between Terraform, Pulumi, and a cloud-native tool like CloudFormation for a new project, beyond just 'what the team already knows'?
IntermediateTerraform7 min
You need to make a breaking change to a shared infrastructure module used by 30 different projects. How do you version and roll this out without breaking everyone simultaneously?
AdvancedTerraform8 min
What would make you choose a private Terraform module registry over Git-tag-based module sourcing, or vice versa?
IntermediateTerraform6 min
How would you structure a shared Terraform module differently if its consuming repos were owned by teams with different release cadences and risk tolerances?
AdvancedTerraform7 min
How would you handle a breaking change to a shared Terraform module that genuinely needs to reach all consumers within a specific timeframe, like a security fix?
AdvancedTerraform7 min
Your team has copy-pasted the same VPC Terraform configuration into six different repositories. Design a module structure and versioning strategy to fix that.
IntermediateTerraform10 min
terraform plan shows changes to a resource you didn't touch, and the diff traces back to a data source — what's actually happening?
AdvancedTerraform7 min
Converting a resource block from count to for_each caused Terraform to want to destroy and recreate every instance — why, and how do you migrate safely?
AdvancedTerraform7 min
A production database was created manually through the AWS console years ago — how would you bring it under Terraform management without recreating it?
IntermediateTerraform7 min
terraform init fails with a provider checksum mismatch after a teammate on a different OS committed the lock file — what's happening?
IntermediateTerraform6 min
How would you deploy the same Terraform resource type to multiple AWS regions within a single configuration, using provider aliases?
IntermediateTerraform6 min
Should you use Terraform workspaces or separate directories/state files to manage dev, staging, and production — what's the actual trade-off?
IntermediateTerraform7 min
How would you make it structurally difficult for someone to accidentally run terraform destroy against a production state?
IntermediateTerraform6 min
terraform plan fails with Error acquiring the state lock — how do you diagnose whether it's a genuine concurrent run or a stale lock?
IntermediateTerraform6 min
A Terraform pipeline that worked yesterday suddenly fails today with no code changes — how does an unpinned provider version cause this?
IntermediateTerraform6 min
A corrupted or accidentally-overwritten Terraform state file threatens to make you lose track of an entire environment's real infrastructure — how would you design for recoverability?
AdvancedTerraform7 min
How would you design a CI/CD pipeline to automatically block a Terraform apply that would destroy a production database?
AdvancedTerraform8 min