Try to use always service principals to deploy your asset bundles. If desired take a look here: https://www.youtube.com/watch?v=5WreXn0zbt8 

Concerning terraform state, it is indeed generated, take a look at this picture extracted from one of my deployments. Make sure ".databricks" folder is ignored in GIT in order to not push to any repo.

If deploying with CLI manually for testing, use local databricks configuration file to include "profiles". If using CI/CD, inject clients, secrets and workspaces urls from environment variables whose content must come from a secure service (Key Vault, etc.)