Cheat sheet & self-check

Pick an answer to see if you got it, and why.

1. Q1. A plan for a small change shows the EKS cluster 'must be replaced'. What's the right reflex?

   1. AApply during a quiet hour
   2. BStop, find the attribute forcing replacement (renamed address, immutable field, module major bump), fix with moved blocks or by reverting the change, and add a pipeline guard
   3. CDelete state
   4. DUse -target to skip it
   Show answer

   B. Replacement of a cluster is never an accident you accept. Find the cause and make the plan in-place.

   From lesson 17 · Q&A: Terraform for EKS at scale

2. Q2. What's the main reason to run Terraform from a pipeline with OIDC rather than from laptops?

   1. ASpeed
   2. BReviewed, reproducible applies with short-lived, narrowly scoped credentials and an audit trail; no long-lived keys on laptops
   3. CLaptops can't run Terraform
   4. DCheaper
   Show answer

   B. The pipeline is the single, auditable path to change infrastructure, and OIDC removes static credentials.

   From lesson 17 · Q&A: Terraform for EKS at scale