When you use a remote backend that needs authentication, HashiCorp recommends that you:
What does Terraform not reference when running a terraform apply -refresh-only ?
When using a remote backend or terraform Cloud integration, where does Terraform save resource sate?
What Terraform command always causes a state file to be updated with changes that might have been made outside of Terraform?