Move Resources in Terraform State

Move resources within Terraform state without recreation. Arguments: $ARGUMENTS

When to Use State Move

• Renaming resources
• Moving resources into modules
• Moving resources out of modules
• Reorganizing state structure
• Refactoring without infrastructure changes

Move Methods

1. Using moved Block (Recommended - Terraform 1.1+)

Declarative approach, tracked in version control:

# moves.tf
moved {
  from = aws_instance.web
  to   = aws_instance.application
}

moved {
  from = aws_s3_bucket.data
  to   = module.storage.aws_s3_bucket.main
}

2. Using terraform state mv Command

Imperative approach for immediate changes:

terraform state mv <source> <destination>

Common Move Operations

Rename Resource

# Command approach
terraform state mv aws_instance.old aws_instance.new

# Moved block approach
moved {
  from = aws_instance.old
  to   = aws_instance.new
}

Move into Module

# Command approach
terraform state mv aws_s3_bucket.logs module.logging.aws_s3_bucket.main

# Moved block approach
moved {
  from = aws_s3_bucket.logs
  to   = module.logging.aws_s3_bucket.main
}

Move out of Module

terraform state mv module.app.aws_instance.main aws_instance.main

Rename Module

terraform state mv module.old_name module.new_name

Move Resource to Different Index

# From count to for_each
terraform state mv 'aws_subnet.private[0]' 'aws_subnet.private["us-east-1a"]'

Output Format

## State Move: [Operation]

### Operation Details
- **Source**: aws_instance.web
- **Destination**: module.compute.aws_instance.main
- **Type**: Move into module

### Pre-Move Verification

**Current State**:
```bash
$ terraform state list | grep aws_instance
aws_instance.web

Source Resource:

$ terraform state show aws_instance.web
# aws_instance.web:
resource "aws_instance" "web" {
    ami                          = "ami-0abcdef1234567890"
    instance_type                = "t3.large"
    id                           = "i-1234567890abcdef0"
    # ... other attributes
}

Move Method

Option A: Moved Block (Recommended)

Add to configuration:

# moves.tf
moved {
  from = aws_instance.web
  to   = module.compute.aws_instance.main
}

Then run:

terraform plan  # Verify move, no recreation
terraform apply # Apply the move

Option B: State Command

terraform state mv aws_instance.web module.compute.aws_instance.main

Expected Result

Move "aws_instance.web" to "module.compute.aws_instance.main"
Successfully moved 1 object(s).

Post-Move Verification

1. Verify new location:

   terraform state list | grep aws_instance
   module.compute.aws_instance.main
   

2. Verify no changes:

   terraform plan
   No changes. Your infrastructure matches the configuration.
   

Configuration Update Required

Update your Terraform configuration to match:

Before (root module):

resource "aws_instance" "web" {
  ami           = var.ami_id
  instance_type = var.instance_type
}

After (in module):

# modules/compute/main.tf
resource "aws_instance" "main" {
  ami           = var.ami_id
  instance_type = var.instance_type
}

Rollback (if needed)

If move was incorrect:

terraform state mv module.compute.aws_instance.main aws_instance.web

Batch Move Example

For multiple resources:

# moves.tf - Moving to module structure
moved {
  from = aws_instance.web
  to   = module.compute.aws_instance.main
}

moved {
  from = aws_security_group.web
  to   = module.compute.aws_security_group.main
}

moved {
  from = aws_iam_role.web
  to   = module.compute.aws_iam_role.main
}

Or via commands:

terraform state mv aws_instance.web module.compute.aws_instance.main
terraform state mv aws_security_group.web module.compute.aws_security_group.main
terraform state mv aws_iam_role.web module.compute.aws_iam_role.main

## Safety Precautions

1. **Backup state first**:
   ```bash
   terraform state pull > state_backup.json

2. Use -dry-run (if available):

   terraform state mv -dry-run source dest
   

3. Verify with plan after move:

   terraform plan
   # Must show NO CHANGES
   

Workflow

1. Backup current state
2. Verify source resource exists
3. Update configuration for destination
4. Run state move (block or command)
5. Verify with terraform plan
6. Commit configuration changes
7. Remove moved blocks after successful migration