HashiCorp Certified: Terraform Authoring and Operations Professional

Terraform Professional · ● Active · Professional · HashiCorp

This deep-dive covers the professional-level Terraform certification that tests advanced module authoring, workspace management, policy as code, and complex infrastructure automation workflows. Every URL verified as live on 2026-05-01.

Exam facts

Vendor source — HashiCorp Certifications ↗

Official exam prep — Terraform Professional Prep ↗

Exam orientation & objectives — Pro Exam Orientation ↗ · Exam Content List ↗

About

The Terraform Authoring and Operations Professional certification validates advanced expertise in both Terraform configuration development and production operations. It is positioned as the next step above the Associate-level certification (003/004), targeting practitioners with extensive hands-on experience building dynamic HCL modules, managing remote state at scale, and establishing collaborative workflows in HCP Terraform (HashiCorp Cloud Platform). Unlike the Associate exam, which tests foundational knowledge, the Professional exam uses scenario-based labs where candidates must actually provision infrastructure, modify configurations, and manage state files in a proctored Linux environment. It is a role-focused certification designed for infrastructure engineers, platform engineers, and DevOps professionals who architect, build, and operate Terraform-based infrastructure at production scale.

Domain context — DevOps

Infrastructure automation and configuration management across cloud and on-premise environments, with emphasis on GitOps workflows, CI/CD integration, policy enforcement, and team collaboration.

Read full deep dive — HashiCorp Infrastructure Automation Ecosystem →

Topics covered

The exam assesses mastery across the following domains:

• HCL Language & Syntax — Complex functions, expressions, meta-arguments, dynamic blocks, custom validation, and conditional logic
• Module Authoring & Design — Module structure, variable/output scoping, module versioning, refactoring strategies, and module composition patterns
• Dynamic Configuration — Using data sources, outputs, locals, and conditional resource creation to build reusable infrastructure templates
• Terraform CLI & Workflows — Advanced CLI operations, state inspection, targeted operations, debugging, and refactoring workflows
• State Management — Remote state backends, state locking, state data sources, state splitting strategies, and cross-configuration state sharing
• HCP Terraform Workspace Management — Creating and organizing workspaces, variable assignment (environment variables, variable sets), workspace access controls, and team governance
• Dynamic Credentials & Authentication — Configuring dynamic provider credentials within HCP Terraform, role assumption, and secrets management patterns
• Policy as Code (Sentinel) — Writing and testing Sentinel policies, policy sets, enforcement levels, policy testing, and integration with HCP Terraform run workflow
• Run Workflow & Automation — Cost estimation, policy enforcement, run tasks, run triggers, and VCS integration for GitOps workflows
• Terraform Cloud/Enterprise Operations — Team access management, permissions scoping, audit logging, and multi-account/multi-cloud scenarios
• Complex Infrastructure Patterns — Multi-region deployments, workspace organization strategies, and state refactoring at scale

Source: Official Exam Content List ↗

Common skills at DevOps · Professional

Shared competencies expected of infrastructure professionals at the Professional level, across all vendors and tools:

• Infrastructure as Code (IaC) at scale — Writing modular, testable, maintainable configuration for multi-environment deployments
• State and secrets management — Handling sensitive data securely, managing state backends, state locking, and disaster recovery
• GitOps and CI/CD integration — Automating infrastructure deployment via version control, pull request workflows, and automated testing
• Policy and governance — Implementing compliance checks, access controls, and cost management policies across teams and accounts
• Multi-cloud and multi-account orchestration — Deploying and managing infrastructure across regions, accounts, and cloud providers
• Troubleshooting and debugging — Reading logs, analyzing state diffs, identifying and fixing configuration drift, and performance tuning
• Team collaboration — Documentation, code review, access management, and knowledge transfer for distributed infrastructure operations

Recommended courses at DevOps · Professional

Course-selection rule: The Professional exam requires hands-on labs in a real provisioned Linux environment. Official HashiCorp prep materials include integrated practice labs. Udemy and third-party courses should include scenario-based exercises, not just lectures.

Practice exams

Note: HashiCorp does not publish a formal practice exam repository for the Professional level as of May 2026. Official practice labs on HashiCorp Developer are the authoritative preparation resource. Whizlabs materials cover Associate-level topics; Professional-specific practice packs are limited.

Books

Book rule: "Terraform: Up and Running, 3rd Edition" (2023) is the current definitive reference; it covers Terraform 1.2+ and aligns with Professional exam content. The 3rd edition adds two entirely new chapters on secrets management and multi-region/multi-account deployments. Terraform Cookbook provides practical recipes suitable for professional practitioners.

Typical job titles at DevOps · Professional

Infrastructure Engineer · Platform Engineer · DevOps Engineer (Senior) · Terraform Architect · Cloud Automation Engineer · Site Reliability Engineer (SRE) · Infrastructure Automation Specialist

(Job titles drawn from current job-board postings that list Terraform Professional or advanced Terraform skills as required or preferred.)

Salary

Salary context: Professional-level Terraform practitioners with proven production experience (modules in use, team leadership, multi-account deployments) command salaries at the higher end. Senior roles in hyperscale tech (AWS, Azure, GCP cloud teams) exceed these ranges. ZAR ranges reflect 2026 Johannesburg/Cape Town IT market data; regional variation is significant.

Skills validated

Specific technologies and practices this exam tests, distinct from general DevOps competencies.

• Terraform CLI (v1.2+) — apply, plan, state, workspace, import, force-unlock, validate, fmt
• HCL syntax & functions — splat expressions, for loops, conditionals, try(), merge(), jsondecode(), local functions
• Module authoring — root modules, child modules, module composition, variable/output scoping, module registry integration
• Terraform state — state backends (S3, Terraform Cloud, Azure Storage, GCS), state locking, state inspection, state refactoring
• HCP Terraform (TFC/TFE) — workspace creation, variable sets, run tasks, policy sets, VCS integration, team access management
• Sentinel policy language — policy rules, imports, policy testing, test framework, policy sets and enforcement levels
• Dynamic credentials — provider configuration with assume_role, workload identity, external data sources, secrets engines
• Provider configuration & authentication — multiple provider instances, alias, for_each with providers, provider functions (v1.8+)
• Data sources & locals — data source queries, computed values, local blocks for reusable expressions
• Advanced resource meta-arguments — count, for_each, depends_on, lifecycle, moved blocks, preconditions/postconditions
• Terraform Cloud operations — cost estimation, drift detection, policy enforcement, run workflows, webhooks, API-driven runs
• Cost management — resource costs via Terraform Cloud, cost policy enforcement, right-sizing recommendations

Related certifications

• Stacks with: No established peer-level certs at the same tier; typically pursued after HashiCorp Certified: Terraform Associate (003/004) ↗
• Prerequisite for: HashiCorp Certified: Consul Associate ↗ · HashiCorp Certified: Vault Associate ↗ — both share infrastructure as code patterns
• Replaces: None (new certification path; does not replace Associate-level)
• Equivalents at this level: AWS Certified Solutions Architect – Professional ↗ · Kubernetes Application Developer (CKAD) ↗ — both test advanced infrastructure/deployment skills
• Vendor overview: HashiCorp Vendor Overview ↗

Sources

• HashiCorp Certifications Page
• HashiCorp Infrastructure Automation Certifications
• Terraform Professional Exam Prep
• Terraform Professional Exam Content List
• Terraform Professional Exam Orientation
• Terraform Professional Practice Labs
• Terraform: Up and Running, 3rd Edition (O'Reilly)
• Terraform Cookbook (O'Reilly)
• Terraform Salary Data - ZipRecruiter
• DevOps Engineer Salary - PayScale ZA
• DevOps Engineer Salary South Africa - OfferZen
• Whizlabs Terraform Certification
• Udemy - Terraform Authoring and Operations Professional
• A Cloud Guru Deep Dive - Terraform
• Pluralsight - Getting Started with Terraform Cloud
• K21 Academy - Terraform Authoring & Operations Professional

Last verified: 2026-05-01

Parent ecosystem: HashiCorp Infrastructure Automation Ecosystem

Domain: DevOps

Vendor overview: HashiCorp Vendor Overview