Inspect single resource state terraform
Dump all attributes of one resolved address for drift/debug investigation
terraform state show 'module.vpc.aws_subnet.private[0]'
more terraform
all 43 commands →
Grep the state list
terraform state list | grep -i 'aws_iam'
Config-driven import block
cat > import.tf <<'EOF'
import {
to = aws_instance.web
id = "<id>"
}
EOF
terraform plan -generate-config-out=generated.tf
Refactor with moved block
cat >> moved.tf <<'EOF'
moved {
from = aws_instance.web
to = aws_instance.app
}
EOF
Replace resource (modern taint)
terraform apply -replace='aws_instance.web'
Surgical targeted plan
terraform plan -target='module.db.aws_db_instance.main'