Refactor with moved block

Rename addresses in code with no destroy/recreate; survives in version control

cat >> moved.tf <<'EOF'
moved {
  from = aws_instance.web
  to   = aws_instance.app
}
EOF

More terraform commands

Replace resource (modern taint)

terraform apply -replace='aws_instance.web'

Force destroy+recreate of one resource; replaces deprecated terraform taint
Surgical targeted plan

terraform plan -target='module.db.aws_db_instance.main'

Limit plan to one address; note: -target is an escape hatch, can mask drift
Refresh-only plan (detect drift)

terraform plan -refresh-only

Sync state to real infra without proposing changes; surfaces out-of-band drift
Migrate backend on init

terraform init -migrate-state -backend-config=backend.hcl

Move state to a new backend; use -reconfigure to skip migration and reset
Query outputs with jq

terraform output -json | jq -r '.endpoints.value[]'

Pipe machine-readable outputs into jq for scripting and downstream wiring