Question

A teammate wants to run a local shell script every time a specific EC2 instance is created by Terraform. They ask where the provisioner block that invokes this script must be placed so it executes as part of that instance's creation lifecycle. What is the correct guidance?

Accepted Answer

Define the provisioner block inside the aws_instance resource block itself, where it will run by default during resource creation

Answer

Define the provisioner in a separate provisioners.tf file at the root and reference the instance by ID

Answer

Add the provisioner inside a data source block that reads the instance so it triggers on refresh

Answer

Place the provisioner inside a terraform block so it applies globally to every resource