Question

A new engineer joins your team and argues that Terraform doesn't really need a state file because it could just query each cloud provider's API directly to determine what infrastructure exists before every plan. Which statement best explains why Terraform relies on a state file rather than treating the live cloud API as its sole source of truth?

Accepted Answer

State records the mapping between resources in your configuration and real-world objects, including metadata Terraform cannot always reconstruct from provider APIs alone.

Answer

Cloud provider APIs are read-only, so Terraform must store all resource data locally in state to be able to make changes.

Answer

State exists only to encrypt credentials, and without it Terraform would expose provider secrets on every API call.

Answer

Terraform cannot authenticate to provider APIs during a plan, so state acts as a cached login token for each provider.