diff --git a/docs/deployment/infrastructure.md b/docs/deployment/infrastructure.md
index 97afea83e..14047ae23 100644
--- a/docs/deployment/infrastructure.md
+++ b/docs/deployment/infrastructure.md
@@ -131,6 +131,7 @@ Terraform is [`plan`](https://www.terraform.io/cli/commands/plan)'d when code is
    ./init.sh <env>
    ```
 
+1. Create a local `terraform.tfvars` file (ignored by git) from the sample; fill in the `*_OBJECT_ID` variables with values from the Azure Pipeline definition.
 1. Make changes to Terraform files.
 1. Preview the changes, as necessary.
 
diff --git a/terraform/terraform.tfvars.sample b/terraform/terraform.tfvars.sample
new file mode 100644
index 000000000..7413007e5
--- /dev/null
+++ b/terraform/terraform.tfvars.sample
@@ -0,0 +1,2 @@
+DEVSECOPS_OBJECT_ID         = "object-id"
+ENGINEERING_GROUP_OBJECT_ID = "object-id"