A pipeline logs Terraform state to a public artifact location. Why is this a concern?

Published
  1. State can contain sensitive resource attributes and must be access-controlled.
  2. State visibility is irrelevant once an apply succeeds.
  3. State contains only decorative labels in every provider.
  4. Public state automatically revokes all leaked credentials.

Comments — 0