Terraform Cheatsheet

Initialize the working directory, download providers, and configure the backend.

Reinitialize the directory and upgrade providers and modules to newer allowed versions.

Initialize Terraform using backend settings from an external configuration file.

Check whether the current Terraform configuration is syntactically valid and internally consistent.

Format Terraform files in the current directory to the canonical style.

Format all Terraform files recursively across modules and environment folders.

Create an execution plan showing what Terraform will add, change, or destroy.

Save the generated plan to a file for later review or controlled apply.

Apply the current execution plan and reconcile infrastructure to the configuration.

Apply a previously saved plan file to ensure exactly reviewed changes are executed.

Apply changes without an interactive approval prompt.

Generate and execute a plan that destroys all managed resources in the current workspace.

Destroy all managed resources without asking for confirmation.

List all resources currently tracked in the Terraform state file.

Display the attributes of a single resource as stored in state.

Move a resource address in state without recreating the underlying infrastructure.

Remove a resource from state without destroying the real infrastructure object.

Download and print the latest remote state to standard output.

Upload a local state file to the configured backend.

Rewrite provider references in state when migrating resources to a new provider source.

Import an existing infrastructure object into Terraform state under a declared resource.

Update state with the real infrastructure data from providers without changing configuration.

Manually remove a state lock when a previous run exited unexpectedly.

List all available workspaces and mark the currently selected one.

Create a new workspace with isolated state for a new environment.

Switch the active workspace for future plan and apply operations.

Print the name of the currently selected workspace.

Delete an unused workspace after its state is no longer needed.

Pass a single input variable inline while generating a plan.

Load input variables from a tfvars file for a specific environment.

Apply infrastructure changes using an inline variable override.

Show all root module outputs after an apply completes.

Print a single named output value from the current state.

Render all outputs as JSON for scripts, pipelines or tooling integrations.

Print a single output as raw text without quotes or JSON formatting.

Download child modules referenced by the current configuration.

Re-download child modules and update them to newer allowed versions.

Initialize the working directory and download required providers and modules.

Preview changes for a specific module without planning the whole stack.

Apply changes only for a selected module when performing controlled partial operations.

Create a plan limited to a specific resource address.

Apply only the changes needed for a single targeted resource.

Destroy one targeted resource without tearing down the entire workspace.

Force Terraform to replace a specific resource during apply.

Generate a plan without refreshing remote object state first.

Control how many resource operations Terraform performs concurrently during apply.

Run a plan with debug logging enabled for provider and backend troubleshooting.

Run an apply with full trace logging to diagnose complex provider behavior.

Write Terraform debug logs to a file instead of flooding standard output.

Display the current state or a human-readable representation of Terraform data.

Render the contents of a saved plan file for review before apply.

Convert a saved plan to JSON for machine analysis, policy checks or drift tooling.

Generate a dependency graph of resources and modules in DOT format.

Render the Terraform dependency graph to a PNG for architecture review.

Show the installed Terraform CLI version and platform details.

List the providers required by the current configuration and modules.

Generate or update dependency lock entries for provider checksums across platforms.

Authenticate the Terraform CLI with Terraform Cloud or HCP Terraform.

Remove locally stored Terraform Cloud credentials for the current hostname.

Show the Terraform Cloud user associated with the current authenticated token.

List remote workspaces when using a Terraform Cloud or remote backend.

Release a stuck remote state lock after verifying no run is still active.

Mark a resource as tainted so Terraform recreates it on the next apply.

Remove the tainted marker from a resource so Terraform stops forcing replacement.