Question

A DevOps engineer provisioned a set of AWS resources using Terraform months ago. A teammate later manually created several additional S3 buckets in the same AWS account through the console. When the engineer runs 'terraform destroy' against the original configuration, which resources will Terraform tear down?

Accepted Answer

Only the resources recorded in Terraform's state file as managed by this configuration

Answer

All resources in the AWS account, including the manually created S3 buckets

Answer

Only resources that currently match the provider's live API inventory, regardless of state

Answer

Nothing, because the manually created buckets cause a state mismatch that halts destruction