What is HashiCorp Terraform? #
Why Should You Use the HashiCorp Terraform Connector? #
The HashiCorp Terraform connector provides visibility into the assets in your environment. You can use this visibility to:
- ensure assets are managed per your security policies
- derive relationships between assets, users, applications, and data
How Does This Connector Work? #
Lucidum executes read-only requests to the HashiCorp Terraform REST API and ingests only meta-data about HashiCorp Terraform devices. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
| Field | Description | Example |
|---|---|---|
| Profile Name | Name of this profile for the connector | production servers |
| URL | The URL for the HashiCorp Terraform API. | https://app.terraform.io |
| API Token | An API token that provides read access to device data and user data. For details on creating an API token in HashiCorp Terraform , see https://developer.hashicorp.com/terraform/cloud-docs/api-docs#authentication | p7g444S3IZ5wmFvmzWmx14qACXdzQ25b |
Toggles #
| Toggle | Description |
| HashiCorp Terraform User | Ingest data about users. Enabled by default |
| HashiCorp Terraform Project | Ingest data about projects. Enabled by default |
Source Documentation #
Creating Credentials #
To create an API Token:
Create a user that belongs to a team with read access to user data and project data. For example, you could create a team with Project Permissions > View All projects and Workspace permissions > View all workspaces. For details on setting Team permissions, see https://developer.hashicorp.com/terraform/tutorials/cloud/cloud-permissions?utm_source=WEBSITE&utm_medium=WEB_IO&utm_offer=ARTICLE_PAGE&utm_content=DOCS#create-a-new-team
Log in with that user account.
Generate an API token. For details, see https://support.kandji.io/kb/kandji-api#generate-an-api-token
Required Permissions #
The HashiCorp Terraform token must have read access to user data and projects data
API Documentation #
https://developer.hashicorp.com/terraform/cloud-docs/api-docs
