Values
Most resources need nothing here: a resource with a live twin recovers its
values by reading it. The exceptions are resources with no twin at all,
a null_resource that ran a script, a time_static, a random_pet, plus
the arguments a provider never echoes back, sensitivity marks, taint, and a
deposed key.
Every managed instance has one small record for those, namespaced per estate, written with compare-and-swap under your own access control. An estate that declares no store gets a local one by default, the way stock implies a local state file.
| Platform | Where values the platform cannot hold go |
|---|---|
| AWS | A record store you declare or get by default: Parameter Store, S3, or a local directory, one record per instance under your IAM. |
| Kubernetes | Not yet designed. |