Does the command 'terraform refresh' modify the existing infrastructure?

The command 'terraform refresh' is designed to update the Terraform state file with the latest information from the actual infrastructure without making any changes to that infrastructure itself. Essentially, it queries the provider to get the current state of resources and reconciles that information with the existing state file, ensuring that the state reflects what is actually provisioned.

This means that 'terraform refresh' does not make modifications to the resources in the infrastructure; instead, it simply reads their current state and updates the metadata in the state file accordingly. The purpose of this command is to track any changes that may have happened outside of Terraform, also known as "drift," but it does not intervene by altering any resource configurations.

This is crucial for maintaining accurate state management and understanding what the infrastructure looks like in its real-world context. By not modifying existing infrastructure, 'terraform refresh' allows you to assess the current state and identify any necessary changes before applying updates or changes with other Terraform commands.