Senior DevOps / SRE [L2] Terraform Use VPC ID from another module Production Scenario [L2]

Q: You need to change a resource attribute that forces replacement but you want to minimize downtime. How?

\"Managing infrastructure as code across multiple teams requires disciplined state management and locking. When addressing this question, I walk the interviewer through our production incident runbook: isolating the blast radius, checking diagnostic logs and metrics, and applying a safe fix.\" Key Strategy: Pro-Tip: Use create_before_destroy lifecycle:.

Use create_before_destroy lifecycle:

#Terraform #Use VPC ID from another module #L2 #IaC #Cloud Infrastructure

🎙️ Candidate Opening & Architectural Context

""Managing infrastructure as code across multiple teams requires disciplined state management and locking. When addressing this question, I walk the interviewer through our production incident runbook: isolating the blast radius, checking diagnostic logs and metrics, and applying a safe fix.""

🛠️ Production Runbook & Step-by-Step Resolution

1️⃣

Production Solution & Architecture

Use create_before_destroy lifecycle: Terraform creates the new resource first, then deletes the old one.

lifecycle {
  create_before_destroy = true
}

💡 The Senior SRE Gold Nugget (Key Architectural Takeaway)

"Pro-Tip: Use create_before_destroy lifecycle:."

⚡ 60-Second Elevator Pitch Talking Points

Immediate Triage: Use create_before_destroy lifecycle:
Run targeted verification commands before modifying configuration.
Automate permanent guardrails (CI check, alerts, IaC policy) to prevent recurrence.

Q: You need to change a resource attribute that forces replacement but you want to minimize downtime. How?

🛠️ Production Runbook & Step-by-Step Resolution

Production Solution & Architecture

📚 Related Production Scenarios in Terraform