Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?

Which of these options is the most secure place to store secrets foe connecting to a Terraform remote backend?
A . Defined in Environment variables
B. Inside the backend block within the Terraform configuration
C. Defined in a connection configuration outside of Terraform
D. None of above

View Answer

Answer: A

Explanation:

https://www.terraform.io/language/settings/backends/configuration#credentials-and-sensitive-data

Warning: We recommend using environment variables to supply credentials and other sensitive data. If you use -backend-config or hardcode these values directly in your configuration, Terraform will include these values in both the .terraform subdirectory and in plan files. This can leak sensitive credentials.