Prevent_destroy lifecycle rule in Terraform - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the prevent_destroy lifecycle rule do in Terraform?

It stops Terraform from deleting a resource, even if you run terraform destroy or remove the resource from your configuration. This protects important resources from accidental deletion.

beginner

How do you enable the prevent_destroy rule in a Terraform resource?

Inside the resource block, add a lifecycle block with prevent_destroy = true. For example:<br>

resource "aws_s3_bucket" "example" {
  lifecycle {
    prevent_destroy = true
  }
}

intermediate

Why is using prevent_destroy considered a best practice for critical resources?

Because it acts like a safety lock, preventing accidental deletion of resources that could cause downtime or data loss if removed unintentionally.

beginner

What happens if you try to delete a resource with prevent_destroy enabled?

Terraform will show an error and stop the deletion process. You must first remove or disable prevent_destroy to delete the resource.

intermediate

Can prevent_destroy protect resources from manual deletion outside Terraform?

No. It only protects resources managed by Terraform during Terraform operations. Manual deletion outside Terraform is not prevented by this rule.

What is the purpose of the prevent_destroy lifecycle rule in Terraform?

A To automatically recreate a resource if deleted

B To allow manual deletion of a resource

C To prevent Terraform from creating a resource

D To prevent a resource from being deleted by Terraform

The prevent_destroy rule stops Terraform from deleting a resource during destroy or update operations.

How do you enable prevent_destroy for a resource?

A Use <code>terraform protect</code> command

B Set <code>destroy_protection = true</code> at the provider level

C Add <code>prevent_destroy = true</code> inside a <code>lifecycle</code> block

D Add <code>prevent_delete = true</code> in the resource block

You enable it by adding prevent_destroy = true inside the resource's lifecycle block.

What happens if you try to delete a resource with prevent_destroy enabled?

A Terraform shows an error and stops deletion

B Terraform deletes it anyway

C Terraform ignores the resource

D Terraform recreates the resource automatically

Terraform will stop and show an error to prevent accidental deletion.

Does prevent_destroy protect resources from manual deletion outside Terraform?

A Yes, it blocks manual deletion

B No, it only protects Terraform operations

C Yes, but only for AWS resources

D No, it only protects during creation

It only prevents deletion during Terraform runs, not manual deletion outside Terraform.

Which of these is a good use case for prevent_destroy?

A Protecting a database instance from accidental deletion

B Automatically scaling resources

C Allowing quick resource replacement

D Ignoring resource changes

Critical resources like databases should be protected from accidental deletion using prevent_destroy.

Explain how the prevent_destroy lifecycle rule works in Terraform and why it is useful.

Think about how to keep important things safe from being removed by mistake.

Describe a scenario where using prevent_destroy would be important and how you would configure it.

Consider resources that hold valuable data or services.