HashiCorp Certified: Terraform Infrastructure Engineer Professional
Demonstrate intermediate to enterprise skills in architecting scalable multi-cloud infrastructure with Terraform, Terraform Cloud/Enterprise workspaces, VCS triggers, remote state locks, and Sentinel policy enforcement.
Official Exam Specification & Quick Facts
Question Difficulty Breakdown
Exam Guidelines & Simulation Rules
Frequently Asked Questions (FAQ)
The Terraform Infrastructure Engineer Professional certification validates intermediate to enterprise-scale capabilities in designing modular multi-cloud infrastructure, managing workspaces, governing via Policy as Code, and automating CI/CD pipelines.
The exam is a 90-minute multiple-choice and scenario-based examination testing operational, security, and architectural engineering decisions.
Cloud architects, platform engineers, DevOps leads, and infrastructure engineers who design, manage, and scale complex Terraform environments across enterprise teams.
Domains include: (1) Scalable Module Architecture, (2) Multi-Cloud and Multi-Account Landing Zones, (3) Policy as Code (Sentinel and OPA Rego), (4) Terraform Cloud/Enterprise Operations, (5) State at Scale and Drift Remediation, and (6) CI/CD Automation & Testing.
Sentinel policies run between plan and apply phases, verifying that proposed infrastructure conforms to security, cost, and tagging standards before changes can be applied.
CLI workspaces only isolate state files locally. Terraform Cloud workspaces provide state isolation, RBAC, environment variable management, VCS integration, speculative plans, audit logs, and self-hosted private agents.
Terraform Cloud generates short-lived dynamic OpenID Connect (OIDC) tokens that exchange for temporary cloud IAM roles (AWS/Azure/GCP), eliminating permanent credentials in CI/CD.
Introduced in Terraform 1.6+, terraform test executes synthetic plan or apply runs against test configurations, validating outputs and preconditions without external third-party tools like Terratest.
Run triggers connect upstream workspaces to downstream workspaces, automatically initiating speculative plans or runs when dependencies (such as shared networking outputs) change.
Decompose monolithic states into modular micro-states, tune the -parallelism flag, utilize target applies judiciously, and leverage tfe_outputs for inter-workspace communication.
Terraform Cloud Continuous Validation and scheduled health checks periodically evaluate configurations against live cloud state to alert engineers of out-of-band modifications.
A passing scaled score of 72% is required. Solid hands-on experience with Terraform CLI, Terraform Cloud, GitOps, and at least one major cloud provider (AWS/Azure/GCP) is strongly recommended.