Terraform state pull and push - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

What happens when you run terraform state pull?

You run terraform state pull in your Terraform project directory. What is the output or result of this command?

A It downloads the current remote state file and prints it to your terminal in JSON format.

B It uploads your local state file to the remote backend, overwriting the remote state.

C It deletes the remote state file from the backend storage.

D It initializes the backend configuration and prepares Terraform to work with the remote state.

💡 Hint

Think about what 'pull' means in everyday life, like pulling data down to you.

The terraform state pull command fetches the current remote state file and prints it in JSON format to your terminal. It does not modify or upload any state.

❓ service_behavior

intermediate

What does terraform state push do?

You have a local state file that you want to upload to the remote backend. What does running terraform state push do?

A Uploads the local state file to the remote backend, replacing the existing remote state.

B Downloads the remote state file and merges it with the local state file.

C Deletes the local state file and replaces it with the remote state file.

D Initializes the backend and prepares Terraform to use remote state.

💡 Hint

Think about what 'push' means, like pushing something up or sending it somewhere.

The terraform state push command uploads your local state file to the remote backend, overwriting the remote state file.

❓ Architecture

advanced

Which backend configuration ensures safe state locking when multiple users run Terraform?

You want to configure Terraform to store state remotely and prevent multiple users from overwriting state at the same time. Which backend configuration below achieves this?

A Use the local backend with state files stored on a shared network drive.

B Use the Terraform CLI without any backend configuration.

C Use the S3 backend without any locking mechanism configured.

D Use the S3 backend with DynamoDB table enabled for state locking.

💡 Hint

Think about how to prevent two people from editing the same file at once.

The S3 backend combined with a DynamoDB table provides state locking to prevent concurrent modifications, ensuring safe collaboration.

❓ security

advanced

What is a security risk of manually running terraform state push with a local state file?

You manually run terraform state push to upload a local state file to the remote backend. What is a potential security risk of this action?

A The command automatically encrypts the state file, so there is no security risk.

B You might overwrite the remote state with outdated or incorrect information, causing infrastructure drift.

C It exposes your cloud provider credentials in the state file to the public internet.

D It deletes all resources managed by Terraform without confirmation.

💡 Hint

Think about what happens if you replace the current state with an old version.

Manually pushing a local state file can overwrite the remote state with outdated data, causing Terraform to lose track of real infrastructure changes, which can lead to errors or resource mismanagement.

🧠 Conceptual

expert

After running terraform state pull, you modify the JSON state file locally. What happens if you then run terraform state push with this modified file?

You pulled the remote state with terraform state pull, edited the JSON state file manually, and then pushed it back with terraform state push. What is the expected outcome?

A Terraform merges your changes with the remote state automatically, preserving all existing resources.

B Terraform validates the JSON and rejects the push if any changes are detected.

C The remote state is replaced with your modified state, which may cause Terraform to mismanage resources if the changes are incorrect.

D The push command fails because manual edits to state files are not allowed.

💡 Hint

Consider what happens when you replace a file with a changed version without checks.

Terraform does not validate or merge manual changes to the state file. Pushing a modified state replaces the remote state exactly, which can cause Terraform to lose track of resources or behave unexpectedly if the changes are invalid.

Practice

1. What does the terraform state pull command do?

easy

A. Deletes the current Terraform state from the backend

B. Uploads a local state file to the remote backend

C. Initializes the Terraform working directory

D. Downloads the current Terraform state file to your local machine

Solution

1. Step 1: Understand the purpose of state pull

   The terraform state pull command fetches the current state file from the remote backend and saves it locally.

2. Step 2: Differentiate from push and other commands

   Unlike push, which uploads a local state, pull only downloads the state. It does not delete or initialize anything.

3. Final Answer:

   Downloads the current Terraform state file to your local machine -> Option D

4. Quick Check:

   Pull = Download state [OK]

Hint: Pull means download state from cloud to local [OK]

Common Mistakes:

• Confusing pull with push (upload)
• Thinking pull deletes state
• Mixing pull with terraform init

2. Which is the correct syntax to upload a local state file named my.tfstate to the remote backend?

easy

A. terraform state pull my.tfstate

B. terraform state push my.tfstate

C. terraform push state my.tfstate

D. terraform upload state my.tfstate

Solution

1. Step 1: Identify the correct command for uploading state

   The command to upload a local state file to the remote backend is terraform state push followed by the filename.

2. Step 2: Verify syntax correctness

   Options C and D use invalid command structures. terraform state pull my.tfstate is for downloading, not uploading.

3. Final Answer:

   terraform state push my.tfstate -> Option B

4. Quick Check:

   Push = upload state file [OK]

Hint: Push uploads local state; syntax: terraform state push filename [OK]

Common Mistakes:

• Using pull instead of push
• Incorrect command order
• Using terraform upload which doesn't exist

3. Given you run terraform state pull and save the output to local.tfstate, what will terraform state push local.tfstate do next?

medium

A. Initialize the Terraform backend

B. Download the remote state again and overwrite local.tfstate

C. Upload the exact state you just downloaded back to the remote backend

D. Delete the remote state file

Solution

1. Step 1: Understand the pull then push sequence

   Pull downloads the current remote state to local. Push uploads a local state file to the remote backend.

2. Step 2: Analyze the effect of pushing the pulled state

   Pushing the same file you pulled will overwrite the remote state with the same content, effectively restoring it.

3. Final Answer:

   Upload the exact state you just downloaded back to the remote backend -> Option C

4. Quick Check:

   Pull then push = download then upload same state [OK]

Hint: Push after pull uploads the same state back [OK]

Common Mistakes:

• Thinking push downloads state
• Assuming push deletes state
• Confusing push with init

4. You tried to run terraform state push without specifying a file. What error will you most likely see?

medium

A. Error: Missing required argument: filename

B. State pushed successfully

C. Error: No state file found in current directory

D. Error: Backend not initialized

Solution

1. Step 1: Check command requirements

   The terraform state push command requires a filename argument to specify which local state file to upload.

2. Step 2: Identify error when argument is missing

   Without the filename, Terraform will return an error about the missing required argument.

3. Final Answer:

   Error: Missing required argument: filename -> Option A

4. Quick Check:

   Push needs filename argument [OK]

Hint: Push command needs a file name argument [OK]

Common Mistakes:

• Running push without filename
• Expecting push to work without arguments
• Confusing missing file error with backend init error

5. You have a corrupted local state file and want to fix your remote state safely. Which sequence of commands should you use?

hard

A. Run terraform state pull to download the remote state, fix the local file, then terraform state push to upload it

B. Run terraform state push first, then terraform state pull

C. Delete the remote state manually, then run terraform init

D. Run terraform refresh to fix the state automatically

Solution

1. Step 1: Download the current remote state safely

   Use terraform state pull to get the latest remote state to your local machine.

2. Step 2: Fix the corrupted local state file

   Edit or repair the downloaded state file carefully to correct corruption.

3. Step 3: Upload the fixed state back to remote

   Use terraform state push to update the remote backend with the corrected state file.

4. Final Answer:

   Run terraform state pull to download the remote state, fix the local file, then terraform state push to upload it -> Option A

5. Quick Check:

   Pull, fix, then push = safe state repair [OK]

Hint: Pull remote state, fix locally, then push back [OK]

Common Mistakes:

• Pushing corrupted state first
• Deleting remote state manually
• Expecting terraform refresh to fix state file