Protect Terraform state
Ensure .tfstate and backup files never leave your local machine.
Explore resourceProfessional .gitignore tools
Infrastructure as Code with Terraform
# Local .terraform directories
.terraform/
# .tfstate files
*.tfstate
*.tfstate.*
# Crash log files
crash.log
crash.*.log
# Exclude all .tfvars files, which are likely to contain sensitive data, such as
# password, private keys, and other secrets. These should not be part of version
# control as they are data points which are potentially sensitive and subject
# to change depending on the environment.
*.tfvars
*.tfvars.json
# Ignore override files as they are usually used to override resources locally and so
# are not checked in
override.tf
override.tf.json
*_override.tf
*_override.tf.json
# Ignore transient lock info files created by terraform apply
.terraform.tfstate.lock.info
# Include override files you do wish to add to version control using negated pattern
# !example_override.tf
# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
# example: *tfplan*
# Ignore CLI configuration files
.terraformrc
terraform.rc
# Optional: ignore graph output files generated by `terraform graph`
# *.dot
# Optional: ignore plan files saved before destroying Terraform configuration
# Uncomment the line below if you want to ignore planout files.
# planout.gitignore in your project rootEnsure .tfstate and backup files never leave your local machine.
Explore resourceLearn how to store secrets outside of Git and validate before commit.
Explore resourcePrevent Terraform cache and plan artifacts from breaking pipelines.
Explore resourceRun the validator on your repository to be sure sensitive files stay out of Git.