Best practice-ek

.terraform/
terraform.tfstate
terraform.tfstate.backup
*.tfvars
.terraform.lock.hcl

terraform {
  backend "s3" {
    bucket         = "my-tf-state"
    key            = "prod/terraform.tfstate"
    region         = "us-east-1"
    dynamodb_table = "terraform-locks"
  }
}

projekt/
├── main.tf
├── network.tf
├── security.tf
├── variables.tf
├── outputs.tf
└── versions.tf

terraform plan -out=tfplan
terraform apply tfplan

variable "instance_type" {
  default = "t2.micro"
}

resource "aws_instance" "web" {
  instance_type = var.instance_type
  ami           = var.ami_id
}

terraform fmt
terraform validate

resource "aws_instance" "web" {
  tags = {
    Name        = "web-server"
    Environment = var.environment
    Project     = "my-app"
    Owner       = "devops-team"
    ManagedBy   = "terraform"
  }
}