Terraform show for state inspection - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

What does the command terraform show display?

You run terraform show after applying your configuration. What information will it display?

A A detailed summary of the current infrastructure state including resource attributes.

B The syntax errors found in the Terraform configuration files.

C The history of all previous Terraform apply operations.

D The list of all Terraform commands available in the CLI.

💡 Hint

Think about what Terraform keeps after applying changes.

terraform show outputs the current state of your infrastructure as Terraform understands it, including all resource details.

❓ Configuration

intermediate

Which command shows the Terraform state in JSON format?

You want to inspect the Terraform state programmatically. Which command will output the state in JSON format?

A terraform output -json

B terraform state list -json

C terraform show -json

D terraform plan -json

💡 Hint

Look for the command that shows state details in JSON.

terraform show -json outputs the entire state in JSON format for programmatic use.

❓ Architecture

advanced

What is the effect of running terraform show on a remote backend state?

You have configured Terraform to use a remote backend for state storage. What happens when you run terraform show?

A Terraform displays the backend configuration but not the state content.

B Terraform downloads the remote state and displays its content locally.

C Terraform fails because <code>terraform show</code> only works with local state files.

D Terraform shows only the local cached state without contacting the remote backend.

💡 Hint

Think about how Terraform accesses remote state when inspecting it.

Terraform fetches the remote state and then displays it locally when running terraform show.

❓ security

advanced

Which risk is associated with sharing the output of terraform show?

You share the output of terraform show with your team. What security risk might this pose?

A It may expose sensitive data like passwords or API keys stored in the state.

B It can cause Terraform to overwrite the remote state accidentally.

C It allows unauthorized users to modify your infrastructure directly.

D It reveals the Terraform CLI version used to create the state.

💡 Hint

Consider what kind of information the state file contains.

The Terraform state can contain sensitive values such as secrets or credentials, so sharing its output can leak this data.

✅ Best Practice

expert

How should you inspect a specific resource's state attribute using Terraform CLI?

You want to see the current value of a specific resource attribute in the Terraform state. Which command and option combination is correct?

A terraform output <resource_address>

B terraform show -target=<resource_address>

C terraform plan -refresh-only -target=<resource_address>

D terraform state show <resource_address>

💡 Hint

Think about the command designed to show detailed info about one resource in state.

terraform state show displays detailed attributes of a single resource from the state file.

Practice

1. What is the main purpose of the terraform show command?

easy

A. To apply changes to your infrastructure

B. To display the current state of your infrastructure managed by Terraform

C. To initialize a new Terraform working directory

D. To destroy all resources managed by Terraform

Solution

1. Step 1: Understand the role of terraform show

   This command is used to display the saved state of your infrastructure, showing what Terraform currently knows about your resources.

2. Step 2: Differentiate from other commands

   Commands like terraform apply, terraform init, and terraform destroy perform actions, but terraform show only displays information.

3. Final Answer:

   To display the current state of your infrastructure managed by Terraform -> Option B

4. Quick Check:

   terraform show = display state [OK]

Hint: Remember: show means display info, not change it [OK]

Common Mistakes:

• Confusing show with apply or destroy commands
• Thinking show modifies infrastructure
• Assuming show initializes Terraform

2. Which of the following is the correct syntax to display the Terraform state in JSON format?

easy

A. terraform show -json

B. terraform show --json-output

C. terraform show json

D. terraform show -format=json

Solution

1. Step 1: Recall the correct flag for JSON output

   The official Terraform command to show state in JSON format uses the -json flag.

2. Step 2: Verify other options

   Options like --json-output, json as a subcommand, or -format=json are not valid Terraform syntax.

3. Final Answer:

   terraform show -json -> Option A

4. Quick Check:

   Use -json flag for JSON output [OK]

Hint: Use '-json' flag exactly for JSON output [OK]

Common Mistakes:

• Adding extra words like '--json-output'
• Using subcommands instead of flags
• Mixing up flag syntax

3. Given the following Terraform state snippet shown by terraform show:

resource "aws_instance" "web" {
  id = "i-1234567890abcdef0"
  ami = "ami-0abcdef1234567890"
  instance_type = "t2.micro"
}

What will terraform show -json output include for the instance type?

medium

A. "instance_type": "t2.large"

B. "instance_type": "ami-0abcdef1234567890"

C. "instance_type": null

D. "instance_type": "t2.micro"

Solution

1. Step 1: Identify the instance_type in the state snippet

   The snippet shows instance_type = "t2.micro" for the resource.

2. Step 2: Understand JSON output reflects state values

   The JSON output from terraform show -json will include the exact value stored, which is "t2.micro".

3. Final Answer:

   "instance_type": "t2.micro" -> Option D

4. Quick Check:

   State value matches JSON output [OK]

Hint: JSON output matches exact state values [OK]

Common Mistakes:

• Confusing AMI ID with instance type
• Assuming default or null values
• Mixing resource attributes

4. You run terraform show -json but get an error: error: no state file found. What is the most likely cause?

medium

A. Terraform is not installed

B. The -json flag is not supported

C. Terraform state file does not exist in the current directory

D. The configuration files have syntax errors

Solution

1. Step 1: Understand the error message

   The error indicates Terraform cannot find the state file to show.

2. Step 2: Identify common reasons for missing state

   If the state file is missing from the current directory, terraform show cannot display state.

3. Final Answer:

   Terraform state file does not exist in the current directory -> Option C

4. Quick Check:

   Missing state file causes this error [OK]

Hint: Check if state file exists before show [OK]

Common Mistakes:

• Assuming -json flag is unsupported
• Thinking Terraform is not installed
• Blaming config syntax errors for state show

5. You want to programmatically extract the IDs of all AWS instances from your Terraform state. Which command and option combination is best suited for this task?

hard

A. terraform show -json | jq '.values.root_module.resources[] | select(.type=="aws_instance") | .values.id'

B. terraform show | grep aws_instance | awk '{print $2}'

C. terraform state list aws_instance

D. terraform output aws_instance_ids

Solution

1. Step 1: Understand the need for programmatic extraction

   You want to get instance IDs from the state in a machine-readable way.

2. Step 2: Evaluate command options

   terraform show -json outputs JSON, which can be filtered with jq to select AWS instances and extract their IDs. Other options either do not output JSON or do not extract IDs directly.

3. Final Answer:

   terraform show -json | jq '.values.root_module.resources[] | select(.type=="aws_instance") | .values.id' -> Option A

4. Quick Check:

   Use JSON output with jq for precise extraction [OK]

Hint: Use -json with jq to filter state data easily [OK]

Common Mistakes:

• Using grep/awk on human-readable output (fragile)
• Using terraform state list which lists names, not IDs
• Assuming terraform output has instance IDs without explicit output