Terraform Interview Questions
22 questions
Terraform interview questions on provider versioning and the dependency lock file, workspaces versus separate state files, state management (drift, locking, splitting monoliths, sensitive data, backup/recovery), and module design — the kind of state-file and provider-behavior subtleties that only show up after running Terraform against real, shared infrastructure.
How would you structure a shared Terraform module differently if its consuming repos were owned by teams with different release cadences and risk tolerances?
AdvancedTerraform7 min
How would you handle a breaking change to a shared Terraform module that genuinely needs to reach all consumers within a specific timeframe, like a security fix?
AdvancedTerraform7 min
terraform plan shows changes to a resource you didn't touch, and the diff traces back to a data source — what's actually happening?
AdvancedTerraform7 min
Converting a resource block from count to for_each caused Terraform to want to destroy and recreate every instance — why, and how do you migrate safely?
AdvancedTerraform7 min
A corrupted or accidentally-overwritten Terraform state file threatens to make you lose track of an entire environment's real infrastructure — how would you design for recoverability?
AdvancedTerraform7 min
How would you design a CI/CD pipeline to automatically block a Terraform apply that would destroy a production database?
AdvancedTerraform8 min
How does Terraform's create_before_destroy interact with resources that have unique naming constraints, like a fixed identifier?
AdvancedTerraform7 min
A single Terraform state file managing an entire environment's infrastructure takes 10 minutes to plan and any change risks touching everything — how would you split it?
AdvancedTerraform8 min
Using terraform_remote_state to reference another team's outputs works, but creates a tight coupling that breaks when they change their state — what's the alternative?
AdvancedTerraform7 min
A database password is passed as a resource argument in Terraform — does marking the variable sensitive actually protect it in the state file?
AdvancedTerraform7 min
terraform plan shows a production RDS instance will be destroyed and recreated after a change you thought was trivial. What would you investigate before running apply?
AdvancedTerraformAWS10 min