Exam Terraform Associate topic 1 question 250 discussion

BC - 👍

I would vote for CD as B would be stored in a state file, whereas CD could allow us to keep secrets outside of terraform.

BD. (B) clearly yes Now it comes down to between (C) and (D). (C) would not be appropriate because connection configurations deal with connections which are not directly relevant to the question. (D) is more relevant and correct because you can pass in your variable file on using the CLI which will allow your secrets to exist outside of the main code

The secure options for storing secrets for connecting to a Terraform remote backend are: B. Defined in Environment variables D. A variable file Environment variables provide a secure way to store sensitive information without exposing it directly in the code. Using a variable file allows for separate storage of sensitive data, which can be managed and secured independently from the Terraform configuration itself. Storing secrets inside the backend block or in a connection configuration outside of Terraform might expose sensitive information within the configuration files or external settings, which could pose a security risk.