Plan output reading in Terraform - Mini Project: Build & Apply

Plan output reading

📖 Scenario: You are managing cloud infrastructure using Terraform. You want to see what changes Terraform will make before applying them. This helps you avoid surprises and understand the planned updates.

🎯 Goal: Build a Terraform configuration that defines a simple resource, run terraform plan to generate a plan output, and then read the plan output using Terraform commands.

📋 What You'll Learn

Create a Terraform configuration file with a resource

Initialize Terraform in the directory

Run terraform plan and save the output to a file

Use Terraform commands to read and show the plan output

💡 Why This Matters

🌍 Real World

Reading Terraform plan outputs helps cloud engineers review infrastructure changes before applying them, preventing mistakes and downtime.

💼 Career

Understanding Terraform plan output reading is essential for roles like Cloud Engineer, DevOps Engineer, and Infrastructure Developer.

1

Create Terraform configuration file

Create a file named main.tf with a resource block for an AWS S3 bucket named example_bucket with bucket name my-example-bucket-12345.

Terraform

# Create a resource block for aws_s3_bucket named example_bucket
# Your code here

Hint

Use the resource keyword, specify aws_s3_bucket as the resource type, and name it example_bucket. Set the bucket attribute to "my-example-bucket-12345".

2

Initialize Terraform

Run terraform init in the directory to initialize Terraform and download the AWS provider plugin.

Terraform

# Run terraform init in your terminal
# Your code here

Hint

Open your terminal and type terraform init to prepare Terraform for this configuration.

3

Run terraform plan and save output

Run terraform plan -out=plan.out to create a plan and save it to a file named plan.out.

Terraform

# Run terraform plan with output saved to plan.out
# Your code here

Hint

Use the -out flag with terraform plan to save the plan to a file.

4

Show the saved plan output

Run terraform show plan.out to read and display the saved plan output file.

Terraform

# Run terraform show to display the saved plan
# Your code here

Hint

Use terraform show with the plan file name to see the planned changes.

Practice

1. What does the terraform plan command primarily show before applying changes?

easy

A. The current cost of your cloud resources

B. The changes Terraform will make to your infrastructure

C. The list of all Terraform providers installed

D. The history of previous Terraform apply commands

Solution

1. Step 1: Understand the purpose of terraform plan

   This command previews the changes Terraform will perform on your infrastructure without applying them.

2. Step 2: Compare options with command purpose

   Only The changes Terraform will make to your infrastructure correctly describes this preview of changes. Other options describe unrelated information.

3. Final Answer:

   The changes Terraform will make to your infrastructure -> Option B

4. Quick Check:

   Plan shows changes = B [OK]

Hint: Plan shows what changes will happen before apply [OK]

Common Mistakes:

• Confusing plan with apply
• Thinking plan shows costs
• Assuming plan shows provider list

2. In Terraform plan output, what does the symbol ~ indicate?

easy

A. Resource will be updated

B. Resource will be created

C. Resource will be deleted

D. Resource will be ignored

Solution

1. Step 1: Recall Terraform plan symbols

   The symbol ~ means a resource will be updated (changed in place).

2. Step 2: Match symbol to meaning

   + means create, - means delete, so ~ must mean update.

3. Final Answer:

   Resource will be updated -> Option A

4. Quick Check:

   ~ means update = A [OK]

Hint: Remember + create, ~ update, - delete symbols [OK]

Common Mistakes:

• Mixing up ~ with + or -
• Thinking ~ means delete
• Assuming ~ means no change

3. Given this Terraform plan output snippet:

  # aws_instance.web will be updated in-place
  ~ resource "aws_instance" "web" {
      instance_type = "t2.micro" -> "t2.small"
    }

What does this output mean?

medium

A. The instance type will change from t2.micro to t2.small

B. No changes will be made to the instance

C. The instance will be deleted and recreated

D. The instance will be created new

Solution

1. Step 1: Analyze the plan output details

   The symbol ~ shows an in-place update. The instance_type changes from "t2.micro" to "t2.small".

2. Step 2: Interpret the meaning

   This means the existing instance will be updated to the new type without deletion.

3. Final Answer:

   The instance type will change from t2.micro to t2.small -> Option A

4. Quick Check:

   ~ means update, instance_type changed = C [OK]

Hint: Look for ~ and arrow showing old -> new value [OK]

Common Mistakes:

• Thinking resource will be deleted
• Ignoring the arrow showing value change
• Assuming no change because resource exists

4. You see this Terraform plan output:

  # aws_s3_bucket.example will be deleted
  - resource "aws_s3_bucket" "example" {
      bucket = "my-bucket"
    }

But you want to keep the bucket. What should you do?

medium

A. Ignore the plan and continue

B. Remove the resource from your Terraform config

C. Run terraform apply immediately

D. Add lifecycle rule with prevent_destroy to the resource

Solution

1. Step 1: Understand the delete plan

   The plan shows the bucket will be deleted, but you want to keep it.

2. Step 2: Use lifecycle prevent_destroy

   Adding a lifecycle block with prevent_destroy = true stops accidental deletion.

3. Final Answer:

   Add lifecycle rule with prevent_destroy to the resource -> Option D

4. Quick Check:

   Use prevent_destroy to block deletes = A [OK]

Hint: Use lifecycle prevent_destroy to stop unwanted deletes [OK]

Common Mistakes:

• Removing resource causes deletion
• Applying plan deletes bucket
• Ignoring plan risks data loss

5. You run terraform plan and see:

  # aws_security_group.sg will be replaced
  - resource "aws_security_group" "sg" {
      name = "old-sg"
    }
  + resource "aws_security_group" "sg" {
      name = "new-sg"
    }

What does this mean and why does Terraform replace the resource instead of updating it?

hard

A. Terraform will fail because name change is not allowed

B. Terraform updates the resource in place changing the name

C. Terraform deletes and recreates because the name attribute is immutable

D. Terraform ignores the change because names can be duplicated

Solution

1. Step 1: Analyze the plan output for replacement

   The plan shows the resource will be deleted (-) and a new one created (+) with a different name.

2. Step 2: Understand why replacement occurs

   Some attributes like security group name are immutable, so Terraform must replace the resource to change them.

3. Final Answer:

   Terraform deletes and recreates because the name attribute is immutable -> Option C

4. Quick Check:

   Immutable attribute change causes replacement = D [OK]

Hint: Immutable attribute changes cause resource replacement [OK]

Common Mistakes:

• Thinking Terraform updates name in place
• Assuming name can be duplicated
• Believing plan will fail on name change