Terraform

Define and provision cloud infrastructure as code. Plan, apply, and manage resources across any cloud provider.

70 commands

Browse by Topic

Getting Started

Quick setup and installation

4commands

State

State management

16commands

Workspace

Workspace operations

6commands

Providers

Provider management

15commands

Modules

Module operations

14commands

Testing

Terraform 1.6+ test framework

5commands

Backends

Cloud backend configuration

5commands

Security

State encryption & security

5commands

Install Terraform (macOS)

$ brew install terraform

Install Terraform using Homebrew on macOS

Install Terraform (Windows)

$ choco install terraform

Install Terraform using Chocolatey on Windows

Verify installation

$ terraform --version

Check Terraform version to verify installation

Initialize Terraform project

$ terraform init

Initialize a working directory containing Terraform configuration files

List workspaces

$ terraform workspace list

Show all workspaces.

Show current

$ terraform workspace show

Display current workspace name.

Create workspace

$ terraform workspace new dev

Create and switch to new workspace.

Select workspace

$ terraform workspace select prod

Switch to existing workspace.

Delete workspace

$ terraform workspace delete dev

Delete an empty workspace.

Use in config

$ terraform.workspace

Reference workspace name in configuration.

Plan changes

$ terraform plan

Preview changes without applying.

Plan to file

$ terraform plan -out=tfplan

Save plan to file for later apply.

Plan destroy

$ terraform plan -destroy

Preview destruction of resources.

Apply changes

$ terraform apply

Apply changes with approval prompt.

Apply auto-approve

$ terraform apply -auto-approve

Apply without confirmation (CI/CD).

Apply saved plan

$ terraform apply tfplan

Apply a previously saved plan.

Target specific resource

$ terraform apply -target=aws_instance.example

Apply only to specific resource.

Destroy all

$ terraform destroy

Destroy all managed infrastructure.

Destroy auto-approve

$ terraform destroy -auto-approve

Destroy without confirmation.

Validate config

$ terraform validate

Check configuration syntax and consistency.

Lock providers

$ terraform providers lock -platform=linux_amd64 -platform=darwin_amd64

Generate dependency lock file for platforms.

Show providers

$ terraform providers

Show required providers tree.

Taint resource

$ terraform taint aws_instance.example

Mark resource for recreation on next apply.

Untaint resource

$ terraform untaint aws_instance.example

Remove taint from resource.

Replace resource

$ terraform apply -replace=aws_instance.example

Force recreation of resource (replaces taint).

Format files

$ terraform fmt

Format .tf files in current directory.

Format recursive

$ terraform fmt -recursive

Format all .tf files recursively.

Check formatting

$ terraform fmt -check

Check if files are formatted (CI/CD).

Show outputs

$ terraform output

Display all output values.

Get output JSON

$ terraform output -json

Output values as JSON.

Get specific output

$ terraform output -raw instance_ip

Get single output without quotes.

Show current state

$ terraform show

Display current state or saved plan.

Show as JSON

$ terraform show -json

Output state as JSON.

Generate graph

$ terraform graph | dot -Tpng > graph.png

Create dependency graph image.

Interactive console

$ terraform console

Open interactive expression console.

Get modules

$ terraform get

Download and update modules.

Pass variables

$ terraform apply -var="instance_type=t3.micro"

Pass variable on command line.

Use var file

$ terraform apply -var-file="prod.tfvars"

Load variables from file.

Version

$ terraform version

Show Terraform and provider versions.

Run tests

$ terraform test

Run Terraform tests (requires Terraform 1.6+).

Verbose test output

$ terraform test -verbose

Run tests with detailed verbose output.

Run specific test

$ terraform test -filter=test_name

Run a specific test by name or pattern.

Test with variables

$ terraform test -var="key=value"

Run tests with custom variable values.

Test JSON output

$ terraform test -json

Output test results in JSON format for CI/CD.

Configure S3 backend

$ terraform init -backend-config="bucket=mybucket"

Initialize with S3 backend bucket configuration.

Migrate state to backend

$ terraform init -migrate-state

Migrate existing state to newly configured backend.

Reconfigure backend

$ terraform init -reconfigure

Reconfigure backend, ignoring existing configuration.

Push state manually

$ terraform state push terraform.tfstate

Manually upload local state file to remote backend.

Pull remote state

$ terraform state pull > terraform.tfstate

Download remote state to local file.

Enable state encryption

$ terraform init -backend-config="encrypt=true"

Initialize backend with encryption enabled (S3).

Replace provider

$ terraform state replace-provider old new

Replace provider reference in state (e.g., after fork).

Force unlock state

$ terraform force-unlock LOCK_ID

Force unlock stuck state (use with extreme caution).

Refresh without lock

$ terraform refresh -lock=false

Refresh state without acquiring state lock.

Custom lock timeout

$ terraform apply -lock-timeout=10m

Set custom timeout for state lock acquisition.

Discussion

Loading comments...

Terraform

Define and provision cloud infrastructure as code. Plan, apply, and manage resources across any cloud provider.

70 commands

Browse by Topic

Getting Started

Quick setup and installation

4commands

State

State management

16commands

Workspace

Workspace operations

6commands

Providers

Provider management

15commands

Modules

Module operations

14commands

Testing

Terraform 1.6+ test framework

5commands

Backends

Cloud backend configuration

5commands

Security

State encryption & security

5commands

Install Terraform (macOS)

$ brew install terraform

Install Terraform using Homebrew on macOS

Install Terraform (Windows)

$ choco install terraform

Install Terraform using Chocolatey on Windows

Verify installation

$ terraform --version

Check Terraform version to verify installation

Initialize Terraform project

$ terraform init

Initialize a working directory containing Terraform configuration files

List workspaces

$ terraform workspace list

Show all workspaces.

Show current

$ terraform workspace show

Display current workspace name.

Create workspace

$ terraform workspace new dev

Create and switch to new workspace.

Select workspace

$ terraform workspace select prod

Switch to existing workspace.

Delete workspace

$ terraform workspace delete dev

Delete an empty workspace.

Use in config

$ terraform.workspace

Reference workspace name in configuration.

Plan changes

$ terraform plan

Preview changes without applying.

Plan to file

$ terraform plan -out=tfplan

Save plan to file for later apply.

Plan destroy

$ terraform plan -destroy

Preview destruction of resources.

Apply changes

$ terraform apply

Apply changes with approval prompt.

Apply auto-approve

$ terraform apply -auto-approve

Apply without confirmation (CI/CD).

Apply saved plan

$ terraform apply tfplan

Apply a previously saved plan.

Target specific resource

$ terraform apply -target=aws_instance.example

Apply only to specific resource.

Destroy all

$ terraform destroy

Destroy all managed infrastructure.

Destroy auto-approve

$ terraform destroy -auto-approve

Destroy without confirmation.

Validate config

$ terraform validate

Check configuration syntax and consistency.

Lock providers

$ terraform providers lock -platform=linux_amd64 -platform=darwin_amd64

Generate dependency lock file for platforms.

Show providers

$ terraform providers

Show required providers tree.

Taint resource

$ terraform taint aws_instance.example

Mark resource for recreation on next apply.

Untaint resource

$ terraform untaint aws_instance.example

Remove taint from resource.

Replace resource

$ terraform apply -replace=aws_instance.example

Force recreation of resource (replaces taint).

Format files

$ terraform fmt

Format .tf files in current directory.

Format recursive

$ terraform fmt -recursive

Format all .tf files recursively.

Check formatting

$ terraform fmt -check

Check if files are formatted (CI/CD).

Show outputs

$ terraform output

Display all output values.

Get output JSON

$ terraform output -json

Output values as JSON.

Get specific output

$ terraform output -raw instance_ip

Get single output without quotes.

Show current state

$ terraform show

Display current state or saved plan.

Show as JSON

$ terraform show -json

Output state as JSON.

Generate graph

$ terraform graph | dot -Tpng > graph.png

Create dependency graph image.

Interactive console

$ terraform console

Open interactive expression console.

Get modules

$ terraform get

Download and update modules.

Pass variables

$ terraform apply -var="instance_type=t3.micro"

Pass variable on command line.

Use var file

$ terraform apply -var-file="prod.tfvars"

Load variables from file.

Version

$ terraform version

Show Terraform and provider versions.

Run tests

$ terraform test

Run Terraform tests (requires Terraform 1.6+).

Verbose test output

$ terraform test -verbose

Run tests with detailed verbose output.

Run specific test

$ terraform test -filter=test_name

Run a specific test by name or pattern.

Test with variables

$ terraform test -var="key=value"

Run tests with custom variable values.

Test JSON output

$ terraform test -json

Output test results in JSON format for CI/CD.

Configure S3 backend

$ terraform init -backend-config="bucket=mybucket"

Initialize with S3 backend bucket configuration.

Migrate state to backend

$ terraform init -migrate-state

Migrate existing state to newly configured backend.

Reconfigure backend

$ terraform init -reconfigure

Reconfigure backend, ignoring existing configuration.

Push state manually

$ terraform state push terraform.tfstate

Manually upload local state file to remote backend.

Pull remote state

$ terraform state pull > terraform.tfstate

Download remote state to local file.

Enable state encryption

$ terraform init -backend-config="encrypt=true"

Initialize backend with encryption enabled (S3).

Replace provider

$ terraform state replace-provider old new

Replace provider reference in state (e.g., after fork).

Force unlock state

$ terraform force-unlock LOCK_ID

Force unlock stuck state (use with extreme caution).

Refresh without lock

$ terraform refresh -lock=false

Refresh state without acquiring state lock.

Custom lock timeout

$ terraform apply -lock-timeout=10m

Set custom timeout for state lock acquisition.

Discussion

Loading comments...