Master DevOps Tools with Real Practice

# Configure S3 backend with native locking (Terraform 1.10+)
terraform {
  backend "s3" {
    bucket       = "my-terraform-state"
    key          = "prod/infrastructure.tfstate"
    region       = "us-east-1"
    use_lockfile = true
    encrypt      = true
  }
}

# Legacy alternative: DynamoDB-based locking (pre-1.10)
# terraform {
#   backend "s3" {
#     bucket         = "my-terraform-state"
#     key            = "prod/infrastructure.tfstate"
#     region         = "us-east-1"
#     dynamodb_table = "terraform-locks"
#     encrypt        = true
#   }
# }

# Useful state commands
terraform state list              # List all managed resources
terraform state show aws_vpc.main # Show details of a resource
terraform state mv                # Rename a resource in state
terraform state rm                # Remove a resource from state