What is HashiCorp Terraform? #
Why Should You Use the HashiCorp Terraform Connector? #
The HashiCorp Terraform connector provides visibility into the assets in your environment. You can use this visibility to:
- ensure assets are managed per your security policies
- derive relationships between assets, users, applications, and data
How Does This Connector Work? #
Lucidum executes read-only requests to the HashiCorp Terraform REST API and ingests only meta-data about HashiCorp Terraform devices. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
| Field |
Description |
Example |
|---|---|---|
|
Profile Name |
Name of this profile for the connector | production servers |
|
URL |
The URL for the HashiCorp Terraform API. |
https://app.terraform.io |
|
API Token |
An API token that provides read access to device data and user data. For details on creating an API token in HashiCorp Terraform , see https://developer.hashicorp.com/terraform/cloud-docs/api-docs#authentication |
p7g444S3IZ5wmFvmzWmx14qACXdzQ25b |
Toggles #
| Toggle | Description |
| HashiCorp Terraform User | Ingest data about users. Enabled by default |
| HashiCorp Terraform Project | Ingest data about projects. Enabled by default |
Source Documentation #
Creating Credentials #
To create an API Token:
- Create a user that belongs to a team with read access to user data and project data.
For example, you could create a team with:
- Project permissions > View All projects
- Workspace permissions > View all workspaces
For details on defining Team permissions, see https://developer.hashicorp.com/terraform/tutorials/cloud/cloud-permissions?utm_source=WEBSITE&utm_medium=WEB_IO&utm_offer=ARTICLE_PAGE&utm_content=DOCS#create-a-new-team.
- Log in with that user account.
- Generate an API token. For details, see https://support.kandji.io/kb/kandji-api#generate-an-api-token.
Required Permissions #
The HashiCorp Terraform token must have read access to user data and projects data
API Documentation #
https://developer.hashicorp.com/terraform/cloud-docs/api-docs
