Three questions, senior answers.

Recap
- 1Pin: required_version, ~> in root, >= in modules, lock file committed, upgrades in a PR
- 2Credentials: profile or env vars locally, OIDC roles in CI, least privilege, a vault
- 3Two regions: aliases for a few resources, separate states for environments
4.I
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.
