Terraform Associate Exam QuestionsBrowse all questions from this exam

Terraform Associate Exam - Question 340


You want to use API tokens and other secrets within your team’s Terraform workspaces. Where does HashiCorp recommend you store these sensitive values? (Choose three.)

Show Answer
Correct Answer:

Discussion

2 comments
Sign in to comment
14bbe81
Oct 18, 2024

B. In HashiCorp Vault. E. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked. A. In a terraform.tfvars file, securely managed and shared with your team.

14bbe81
Oct 18, 2024

B. In HashiCorp Vault: HashiCorp Vault is a secure way to store and manage secrets, such as API tokens and credentials, and it integrates well with Terraform. E. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked: Terraform Cloud and HCP Terraform provide a secure way to store sensitive values by marking them as sensitive in workspace variables, preventing these values from being exposed in logs or outputs. A. In a terraform.tfvars file, securely managed and shared with your team: Storing sensitive values in a terraform.tfvars file can be acceptable if the file is securely managed and not checked into version control. This file should be shared securely (e.g., encrypted) with your team, but special care is needed to avoid exposing it.