When configuring a remote backend in Terraform, it might be a good idea to purposely omit some of the required arguments to ensure secrets and other important data aren’t inadvertently shared with others .
What are the ways the remaining configuration can be added to Terraform so it can initialize and communicate with the backend? (select three)
A . directly querying HashiCorp Vault for the secrets
B . command-line key/value pairs
C . use the -backend-config=PATH to specify a separate config file
D . interactively on the command line
Answer: B,C,D
Explanation:
You do not need to specify every required argument in the backend configuration. Omitting certain arguments may be desirable to avoid storing secrets, such as access keys, within the main configuration. When some or all of the arguments are omitted, we call this a partial configuration.
With a partial configuration, the remaining configuration arguments must be provided as part of the initialization process. There are several ways to supply the remaining arguments: https://www.terraform.io/docs/backends/init.html#backend-initialization