Terraform apply -replace flag - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding the purpose of the -replace flag in Terraform apply

What does the -replace flag do when used with terraform apply?

A It updates the specified resource without recreating it.

B It skips the specified resource during the apply process.

C It rolls back the last apply operation on the specified resource.

D It forces Terraform to destroy and recreate the specified resource during apply.

💡 Hint

Think about how you can force Terraform to rebuild a resource even if no changes are detected.

The -replace flag tells Terraform to treat the specified resource as if it needs to be replaced, causing it to be destroyed and recreated during the apply.

❓ Configuration

intermediate

Using -replace flag syntax correctly

Which of the following commands correctly uses the -replace flag to replace the resource aws_instance.web_server?

A terraform apply -replace=aws_instance.web_server

B terraform apply --replace aws_instance.web_server

C terraform apply -replace aws_instance.web_server

D terraform apply --replace=aws_instance.web_server

💡 Hint

Check the exact syntax for flags with values in Terraform CLI.

The correct syntax uses a single dash and equals sign: -replace=resource_name.

❓ service_behavior

advanced

Effect of -replace on resource lifecycle

What is the expected behavior of Terraform when applying with -replace=aws_s3_bucket.my_bucket if the bucket exists and has data?

A Terraform will skip the bucket since it already exists.

B Terraform will update the bucket in place without data loss.

C Terraform will destroy the existing bucket and recreate it, causing data loss.

D Terraform will create a new bucket with a different name.

💡 Hint

Consider what happens when a resource is destroyed and recreated.

The -replace flag forces destruction and recreation, so existing data in the bucket will be lost unless backed up.

❓ security

advanced

Security implications of using -replace on sensitive resources

What is a key security risk when using terraform apply -replace on resources like databases or secrets managers?

A Temporary exposure of sensitive data during resource recreation.

B Prevention of unauthorized access during apply.

C Automatic encryption of data during replacement.

D No impact on security as resources are replaced safely.

💡 Hint

Think about what happens to data when a resource is destroyed and recreated.

Destroying and recreating sensitive resources can expose data temporarily or cause loss if not handled carefully.

✅ Best Practice

expert

Best practice when using -replace flag in production

Which is the best practice before running terraform apply -replace on a critical production resource?

A Delete the resource manually before running apply.

B Backup the resource data and test replacement in a staging environment first.

C Ignore state locking to speed up apply.

D Run the command directly in production to save time.

💡 Hint

Consider how to avoid data loss and downtime.

Backing up data and testing in staging helps prevent data loss and service disruption.