Infrastructure · Flashcard
What makes declarative IaC different from a provisioning script?
- AYou describe the end state and the tool works out the steps
- BIt runs faster, because the tool parallelises all the steps
- CIt needs no credentials, since the tool holds them for you
- DIt can only create resources, never modify or destroy them
Why this is the answer
A script says how — create this, then that — and running it twice does the work twice. A declarative configuration says what the result should be, and the tool computes the difference from what exists, which is what makes the same file safe to apply repeatedly. Credentials are still yours to supply.
Official docs