Question

Your team runs Terraform in a CI/CD pipeline. Before applying, you want the pipeline to automatically detect whether a plan would make any changes so it can gate the apply step and require manual approval only when changes exist. Which approach correctly leverages the core workflow to accomplish this?

Accepted Answer

Run 'terraform plan -detailed-exitcode' and branch on the exit code: 0 means no changes, 2 means changes are present, and 1 means an error occurred.

Answer

Run 'terraform apply -auto-approve' and cancel it if the output shows resources will be added or destroyed.

Answer

Run 'terraform validate' and check its exit code, since it reports whether the desired state differs from real infrastructure.

Answer

Run 'terraform init -upgrade' and inspect the lock file diff to determine whether infrastructure changes are pending.