`terraform validate`: syntax and internal consistency checks without contacting provider APIs

terraform validate checks whether a configuration is syntactically valid and internally consistent. It answers the question: could Terraform make sense of this code at all? It does not answer whether the infrastructure change will succeed, because it never contacts remote services, neither the provider APIs nor remote state.