Inspect Terraform state from the CLI using state list, state show, and show to view resource IDs, network attributes, tags, and full state dumps
In this lesson you’ll learn how to inspect Terraform state from the CLI. This is useful when you need to verify concrete resource IDs, network attributes, tags, or other values that Terraform has recorded after apply. The primary commands demonstrated here are:
terraform state list — enumerate resource addresses stored in the state.
terraform state show — display detailed attributes for a single resource from the state.
terraform show — render the full state (or a saved plan file) in a human-readable format.
Use terraform state list to discover resource addresses, then pass one of those addresses to terraform state show to inspect that resource in detail.
Begin by listing every resource Terraform currently manages in your state:
$ terraform state listaws_instance.webaws_subnet.privateaws_subnet.publicaws_vpc.main$
This output lists resource addresses you can use as arguments to terraform state show. The addresses reflect the resource type and name from your configuration (for example, aws_instance.web).
When you want a full dump of state data or want to inspect a saved plan file, use terraform show. This prints resource blocks with all recorded attributes:
To view only one resource’s recorded attributes, run terraform state show with a resource address printed by terraform state list. For example, inspect the EC2 instance:
This reveals the subnet ID, owner, tagging, region, and its associated VPC.
Avoid editing the state file manually. If you need to adjust state (move, remove, or import resources), use Terraform state subcommands like terraform state mv, terraform state rm, or terraform import to keep state consistent and avoid corruption.
