How does a Terraform developer ensure infrastructure security during provisioning?

The Terraform developer ensures that infrastructure security is locked by applying RBAC and the principle of least privileges, limiting the resources. Then, it enforces security policies with the help of tools like Sentinel and handles sensitive data securely using either the ‘sensitive’ attribute in Terraform or other tools like HashiCorp Vault to avoid exposure. It goes along with regular audits for monitoring unauthorized access, encryption of both data at rest and in transit, and logging. This is achieved with automated security checks within CI/CD pipelines. Developers catch vulnerabilities early and handle them ensuring safe infrastructure provisioning.