u/webgtx

I'm wondering if there are benefits to managing secrets and variables via environment variables instead of pulling tfvars from buckets during CI. With environment variables, you can make changes without rewriting and pushing a 1,000-line tfvars file just to update one value, and it's also easier to track changes. However, implementing pipelines this way isn't as straightforward as using tfvars files.