What file records the exact provider versions used in a Terraform configuration to ensure reproducible builds?

• A. .terraform.lock.hcl
• B. main.tf
• C. terraform.tfvars
• D. backend.tf

Answer: (A)

Terraform uses a lock file to pin the exact provider versions and their checksums for reproducible builds. The file named .terraform.lock.hcl is generated and updated by terraform init and records the specific provider versions (and their source) along with a checksum. This ensures future runs install the same provider binaries, giving consistent behavior across machines. Other files have different purposes: main.tf contains the resource and provider configuration, terraform.tfvars holds variable values, and backend.tf configures the state backend. Without the lock file or with changes to it, Terraform may resolve and fetch different provider versions, breaking reproducibility.