Examkin

Question

Difficulty: EasyImplementing Infrastructure as Code using Terraform and Deployment Manager

A cloud administrator is setting up a shared Google Cloud Storage (GCS) backend for a team using Terraform to provision Google Cloud infrastructure. The administrator must ensure that simultaneous deployments by different engineers do not cause race conditions or state file corruption. Which GCS backend capability does Terraform automatically utilize to prevent concurrent state updates?

  1. Native object locking built into the Google Cloud Storage backend pluginAnswer
  2. B
    Assigning primitive Owner roles on the storage bucket to all deployment service accounts to override write locks
  3. C
    Maintaining state files in unversioned local directory storage and merging changes manually through Git repositories
  4. D
    Granting the Service Account Admin role to engineers so they can manually unlock lock files using administrative credentials

Answer

Terraform natively uses built-in Google Cloud Storage object locking within the GCS backend to handle state locking automatically during operations.
The correct choice highlights the built-in capability of Terraform's GCS backend plugin, which utilizes native Google Cloud Storage locking mechanisms to lock the state file during execution automatically. This prevents concurrent operations from corrupting the state file without needing extra IAM overrides or external databases.

Step-by-Step Solution

1
Identify the requirement for remote state management in team environments.
Multiple engineers deploying infrastructure concurrently require a centralized state backend with locking capabilities to prevent state file corruption.
Simultaneous execution of Terraform commands against the same state file causes race conditions.
2
Evaluate the native features of the Terraform Google Cloud Storage (GCS) backend.
The GCS backend for Terraform automatically supports object locking out of the box.
When `terraform apply` or `terraform plan` runs, Terraform creates a lock file in the GCS bucket to ensure exclusive access until the operation completes.

Key Concept

Terraform Remote State Management and Locking using Google Cloud Storage Backend
Rate this question

Topics

Implementing Infrastructure as Code using Terraform and Deployment Manager

More questions from this topic