Terraform state rm for removing resources - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What happens when you run terraform state rm on a resource?

You have a resource managed by Terraform. You run terraform state rm <resource_name>. What is the immediate effect on Terraform's behavior?

A Terraform deletes the actual resource from the cloud provider immediately.

B Terraform marks the resource as tainted and plans to recreate it on next apply.

C Terraform locks the state file to prevent changes to the resource.

D Terraform removes the resource from its state file but does not delete the actual resource.

💡 Hint

Think about what the state file represents versus the real resource.

The terraform state rm command removes the resource from Terraform's state file. This means Terraform no longer tracks it, but the actual resource in the cloud remains untouched. Terraform will not manage or delete it unless you import it back or manually delete it.

❓ Configuration

intermediate

Which command correctly removes a resource named aws_instance.example from Terraform state?

You want to remove the resource aws_instance.example from Terraform's state without deleting the actual instance. Which command should you run?

A terraform destroy -target=aws_instance.example

B terraform state rm aws_instance.example

C terraform apply -replace=aws_instance.example

D terraform import aws_instance.example

💡 Hint

Focus on the command that only affects the state file.

terraform state rm aws_instance.example removes the resource from the state file only. The other commands either destroy, replace, or import resources, which is not what is asked.

❓ service_behavior

advanced

After running terraform state rm on a resource, what will happen if you run terraform apply without changing configuration?

You removed a resource from Terraform state using terraform state rm. You did not change your Terraform configuration files. What will Terraform do when you run terraform apply next?

A Terraform will recreate the resource because it is missing from the state but present in configuration.

B Terraform will do nothing because the resource is removed from state and configuration.

C Terraform will show an error about missing resource in state.

D Terraform will delete the resource from the cloud provider automatically.

💡 Hint

Think about how Terraform compares state and configuration.

When a resource is removed from state but still exists in configuration, Terraform treats it as needing creation. So on terraform apply, it will try to create it again.

❓ security

advanced

What is a potential risk of using terraform state rm on sensitive resources?

You use terraform state rm to remove a sensitive resource like a database instance from Terraform state. What risk does this pose?

A Terraform will automatically delete the resource after state removal.

B Terraform will encrypt the resource data in the state file.

C Terraform will lose track of the resource, so accidental manual changes may go unnoticed.

D Terraform will expose sensitive data in logs after removal.

💡 Hint

Consider what happens when Terraform no longer manages a resource.

Removing a resource from state means Terraform no longer tracks it. Manual changes or drift can happen without Terraform detecting them, which is risky for sensitive resources.

❓ Architecture

expert

You want to remove a resource from Terraform state but keep it managed by another Terraform workspace. What is the best approach?

You have a resource managed in Terraform workspace dev. You want to remove it from dev state but keep managing it in workspace prod. How should you proceed?

A Run <code>terraform state rm</code> in <code>dev</code> workspace and import the resource into <code>prod</code> workspace.

B Delete the resource manually and recreate it in <code>prod</code> workspace.

C Run <code>terraform destroy</code> in <code>dev</code> workspace and then create in <code>prod</code>.

D Copy the state file from <code>dev</code> to <code>prod</code> and run <code>terraform apply</code>.

💡 Hint

Think about how Terraform tracks resources across workspaces.

Each workspace has its own state. To stop managing a resource in one workspace but keep it in another, remove it from the first workspace's state and import it into the second workspace's state.