Someone changed a production resource by hand, and now your Terraform plan wants to destroy and recreate it. What do you do?

What the interviewer is looking for

• This question tests infrastructure as code. Talks about Terraform, OpenTofu or similar with modules, remote state, code review of plans, drift detection and environment separation.
• Strong answers: Stops before applying, investigates the drift, imports or updates code to match reality, uses lifecycle protections, and addresses the process gap.
• Likely follow-up: How would you prevent manual changes like that in future?

Another way it may be asked: A teammate fixed something directly in the cloud console, and now your infrastructure code wants to delete it. How do you handle that safely?

A structure to follow: Answer, explain, example, limits

1. Step 1

   Answer

   Give your direct answer in the first sentence so the interviewer knows where you are going.

2. Step 2

   Explain

   Say how it works or why you would do it that way, in plain words before jargon.

3. Step 3

   Example

   Anchor it in something you have actually done or seen, with the detail that shows hands-on experience.

4. Step 4

   Limits

   Say when your approach would not be the right one. It shows judgement.

This is guidance on shape, not a script. Use your own real experience and facts; never invent details to fill a gap. See the STAR guide and answer frameworks.

Common slips

• Reciting a definition without showing you have applied it.
• Using terms you cannot explain if asked a level deeper.
• Claiming experience beyond what you can discuss in detail.

How to practise it

Say the answer in 90 seconds, then answer the follow-up as if it were a new question.

Related questions

• Why would a team define its infrastructure in code instead of clicking through a cloud console, and what problems does that solve?
• Walk me through what happens, step by step, between a developer pushing code and that code running in production, on a pipeline you would set up.
• In plain terms, what is a container, and how is it different from running an app directly on a virtual machine?
• A pod in Kubernetes keeps restarting in a crash loop right after a deploy. How do you work out what is wrong?
• Tell me about a time you set up monitoring or alerting that caught a problem before users noticed. What did you measure?

Browse all questions