OpenTofu State Encryption: Protect Secrets at Rest
Configure OpenTofu's built-in state encryption to protect sensitive values at rest. AES-GCM with PBKDF2 or AWS KMS / GCP KMS / Azure Key Vault key providers.
7 articles
Configure OpenTofu's built-in state encryption to protect sensitive values at rest. AES-GCM with PBKDF2 or AWS KMS / GCP KMS / Azure Key Vault key providers.
Fix the Terraform 'Backend configuration changed' error. Migrate state between backends (local to S3, S3 to S3), resolve lock conflicts
How to use Terraform workspaces to manage dev, staging, and production environments with one configuration. Commands, patterns, and when to avoid workspaces.
Complete guide to Terraform state: what it is, why it matters, remote backends, state locking, essential commands, and best practices for teams.
Fix the Terraform state snapshot created by newer version error. Covers upgrading Terraform, version pinning with tfenv, and team version management.
Fix the Terraform timeout waiting for state error for RDS, EKS, CloudFront, and other slow resources. Increase timeouts and debug stuck resources.
Fix the Terraform resource already exists error when creating resources that exist outside Terraform. Covers import, data sources, and state management.