Question

Your team manages Cisco ACI infrastructure with Terraform. A network engineer manually created several ACL contract filter entries directly in the APIC GUI last week to resolve an urgent outage. These objects are not represented in your Terraform configuration or state file. You must bring these manually-created objects under Terraform management without deleting and recreating them, so future runs report accurate drift. What is the correct approach?

Accepted Answer

Write the matching resource blocks in your configuration, then run 'terraform import' for each existing object to map it into state before the next 'terraform apply'.

Answer

Run 'terraform apply' immediately so Terraform reconciles the live infrastructure and automatically absorbs the manually-created objects into state.

Answer

Run 'terraform refresh' alone, which will detect the new objects on the APIC and add them to both the configuration files and the state file.

Answer

Delete the manually-created objects in the APIC GUI and re-add them to the HCL configuration so 'terraform apply' recreates them cleanly.