You are troubleshooting a running EC2 instance managed by Terraform. A teammate changed something out of band and you want to inspect all current attributes (including the AMI ID and security group IDs) that Terraform has recorded for just that one resource, without listing every resource in the state. Which command should you run?