Interview Questions and Answers

Terraform is an open-source infrastructure as code (IaC) tool used for building, changing, and versioning infrastructure efficiently.

A Terraform module is a reusable and self-contained collection of Terraform configurations used to define and provision a particular piece of infrastructure.

'terraform init' initializes a Terraform working directory, downloading necessary plugins and setting up the backend for storing the Terraform state.

A Terraform provider is a plugin that enables Terraform to interact with a specific cloud, infrastructure, or service provider, allowing resource creation and management.

A remote backend in Terraform is a centralized location where Terraform stores its state file. It allows collaboration among team members and supports features like locking and state versioning.

HCL (HashiCorp Configuration Language) is the language used to write configuration files in Terraform. It is designed to be easy to read and write for both humans and machines.

Interpolation syntax is used in Terraform to insert values into strings. Examples include '${}' for variable interpolation and '${resource.type.name}' for referencing resource attributes.

Terraform workspaces allow you to manage multiple instances of the same infrastructure in a single configuration. Each workspace has its own state file, making it useful for environment separation.

'terraform refresh' is used to reconcile the Terraform state with the real-world infrastructure. It updates the state file with the current state of the resources.

'terraform import' is used to import existing infrastructure into Terraform. It associates an existing resource with a Terraform resource configuration.

The 'depends_on' attribute in Terraform is used to explicitly specify the order in which resources should be created. It creates a dependency relationship between resources.

'terraform console' provides an interactive command-line interface for evaluating expressions and interpolations in the context of a Terraform configuration.

Terraform supports workspaces and variable files to manage different environments. Separate configuration files or folders can be used for each environment.

'terraform taint' marks a resource instance as tainted, indicating that it should be destroyed and recreated on the next 'terraform apply'.

Terraform is primarily an IaC tool that focuses on provisioning and managing infrastructure, while Ansible is a configuration management tool that automates software provisioning, configuration, and application deployment.

Terraform state is a snapshot of the infrastructure managed by Terraform. It is used to keep track of the resources created and their current state.

Terraform uses input variables and data sources to manage sensitive information securely. Secrets can be stored in environment variables or using a secret management tool.

'terraform plan' shows the execution plan without actually applying the changes, while 'terraform apply' executes the plan and makes the changes to the infrastructure.

To create a reusable Terraform module, define input variables, outputs, and use the module in other configurations. Organize the module in a separate directory with a 'main.tf' file.

Terraform automatically handles dependencies between resources. It analyzes the resource graph and provisions resources in the correct order based on dependencies.

'count' is used to create multiple instances of a resource, while 'for_each' is used for creating multiple instances based on a map or set of values.

The 'locals' block in Terraform is used to define local variables within a module. These variables are not exposed to the calling module and are only accessible within the module's scope.

Terraform provides a 'backend' configuration for state storage, and some backends support locking. By configuring the 'lock' option, Terraform can lock the state to prevent concurrent modifications.

Sensitive data like API keys can be stored securely using Terraform's sensitive input variable type or by using a secret management tool. Avoid storing sensitive information directly in configuration files.

Provisioners are used to execute scripts on a remote resource after creation, while 'null_resource' is a resource type that doesn't directly create infrastructure but can be used to trigger provisioners or other actions.

Terraform automatically masks sensitive information (like secrets) passed through environment variables in command output, making it more secure when dealing with secrets.

'terraform state mv' is used to move a resource instance from one Terraform state file to another. It allows restructuring or reorganizing resources in the state.

'terraform output' is used to display the values of output variables defined in the Terraform configuration. It helps retrieve information about the infrastructure after it's created.

A 'resource' block is used to define and create infrastructure resources, while a 'data' block is used to fetch and reference data that already exists, such as information from other resources.

In Terraform Cloud, you can use the 'sensitive' attribute for variables to mark them as sensitive. Terraform Cloud also provides a secure environment for managing sensitive information.