You author config, initialize the directory, preview with plan, then apply. Destroy is a separate teardown step, not part of the normal build loop.