Terraform Associate (003) Study Plan for 2026: 60 Day Roadmap with Labs

Despite the BSL licence change in August 2023 and the emergence of OpenTofu as a fork, Terraform remains the dominant IaC tool at large enterprises in 2026. HashiCorp reports 68 percent of Fortune 500 companies use Terraform in production. The Associate certification is the fastest way to prove IaC fluency in a job market where DevOps and Platform Engineering roles now list Terraform as a top-3 required skill.

The 003 revision (launched Q1 2024, still current for 2026) added HCP Terraform coverage, Sentinel and OPA policy basics, and dropped some legacy 0.12 syntax. It is now a purer test of modern Terraform practice.

57 multiple choice and multiple response questions in 60 minutes. Passing score is not published as a percentage but is calibrated per exam form; community consensus is around 70 percent correct.

• Understand IaC concepts: 3 to 5 percent
• Understand Terraform purpose vs other IaC: 3 to 5 percent
• Understand Terraform basics: 10 to 15 percent
• Use Terraform CLI outside core workflow: 10 to 15 percent
• Interact with Terraform modules: 10 to 15 percent
• Use core Terraform workflow: 15 to 20 percent
• Implement and maintain state: 15 to 20 percent
• Read, generate and modify configuration: 15 to 20 percent
• Understand HCP Terraform capabilities: 5 to 10 percent

Install Terraform locally and provision against a free tier AWS or Azure account. Learn HCL syntax deeply: resources, data sources, variables, outputs, locals, expressions and functions. Build a repeatable pattern: init, validate, plan, apply, destroy. Learn the provider block, provider aliases and provider version pinning.

• Build a VPC + EC2 + S3 project from scratch with variables and outputs
• Practise terraform fmt, validate, plan, apply, destroy 20 times
• Learn count vs for_each and when to use each
• Understand implicit vs explicit dependencies (depends_on)

State is where 40 percent of exam questions live. Understand local vs remote state, state locking with DynamoDB or Cosmos, terraform state list, terraform state mv, terraform import, terraform state rm and the difference between refresh-only and normal plans. Learn workspace commands and when workspaces are the wrong solution (production isolation).

Build one reusable module (VPC or storage account), publish it locally, then consume it from a root module. Understand module inputs, outputs, and version constraints from the Terraform Registry.

Sign up for the free HCP Terraform tier. Create an organisation, a workspace, connect it to a GitHub repo, set variables and secrets, and run a plan and apply from the UI. Understand VCS-driven vs CLI-driven vs API-driven workflows. Learn Sentinel policy basics and how private module registries work.

In parallel take 3 full timed practice exams from Bryan Krausen or Whizlabs. Target sustained 85 percent before booking. Book the exam within 3 days of hitting that target so momentum does not fade.

Which command creates a state backup: apply and refresh both create .backup files. Which files should be committed: .tf, .tfvars (usually), never .tfstate. What terraform taint has been replaced with: terraform apply -replace in 0.15 plus. When to use workspaces: environments that share the same infrastructure code with minor variable differences, not fully isolated prod / non-prod. Which functions are available: try, can, coalesce, lookup, merge, concat, jsonencode, jsondecode. These come up in almost every exam form.