We’re using Terraform to manage our AWS infrastructure and the state itself is also in AWS. We’ve got 2 separate accounts for test and prod and each has an S3 bucket with the state files for those accounts.

We’re not setting up alternate regions for disaster recovery and it’s got me wondering if the region the terraform S3 bucket is in goes down then we won’t be able to deploy anything with terraform.

So what’s the best practice for this? Should we have a bucket in every region with the state files for the projects in that region but then that doesn’t work for multi-region deployments.

  • nomecks@lemmy.world
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    10 months ago

    Using TF Cloud or TF Enterprise is best practice. They keep all the states secure in one place.

    • dbx12@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      10 months ago

      That’s just moving the problem somewhere else isn’t it? Unless tf cloud does keep multi region backups of states.