Question

A DevOps engineer wants to guarantee that exactly the changes reviewed by a colleague are the ones that get applied to production, with no possibility of the configuration or remote state changing between the review and the deployment. Which sequence of commands best achieves this goal?

Accepted Answer

Run 'terraform plan -out=tfplan', have the colleague review the output, then run 'terraform apply tfplan'.

Answer

Run 'terraform plan', have the colleague review the on-screen output, then run 'terraform apply' and confirm at the prompt.

Answer

Run 'terraform apply -auto-approve' twice and compare the two outputs for consistency.

Answer

Run 'terraform plan' and pipe its output to a text file, then run 'terraform apply -refresh=false' after review.