Knowledge Hub
Cloud-based IaC
TryHackMe21 answered prompts
Cloud-based IaC TryHackMe walkthrough with 21 answered prompts.
Prompts and answers
-
Terraform Core takes its input from two sources; this source keeps track of what the infrastructure currently looks like. What is the name of this source?
State
-
The other source defines what you want infrastructure to look like. What is the name of this source?
Terraform Config files
-
If there is a difference between what the infrastructure currently looks like and what you want it to look like, this will require a change. This change will be actioned by a....?
Provider
-
When defining the VPC (in the first example) before the resource block, what was defined?
provider
-
When modulating your infrastructure, what file acts as the central configuration file?
main.tf
-
Instead of repeatedly defining values across multiple infrastructure modules these values can be collected in one file and referenced. What is the name of this file?
variables.tf
-
What command would you run to action the steps outlined to take your infrastructure from the desired state to the actual state?
terraform apply
-
What command would you run to prepare your workspace?
terraform init
-
What command, when run, would provide you with a series of actions that would be required to take your infrastructure from the desired state to the actual state?
terraform plan
-
What is generated during stack creation?
events
-
Can you define rollback triggers in a template? (yay or nay)
yay
-
What allows you to refer to resources in another stack?
Cross-Stack References
-
Does CloudFormation support intrinsic functions? (yay or nay)
yay
-
What feature helps you understand the impact of modifications before they are applied?
change sets
-
Is CloudFormation cloud agnostic? (yay or nay)
nay
-
Which IaC tool has deep AWS integration?
CloudFormation
-
Which IaC tool has accessible community-driven modules?
Terraform
-
What can you do instead of hardcoding secrets in IaC code?
Parameterise Sensitive Data
-
What collaborative process can catch security issues early?
Code Reviews
-
What policies can you implement in CloudFormation for update controls?
Stack Policies
-
Can you use your Cloud-based IaC knowledge to get the flag?
THM{c10uD-b@z3d-1@SeE}