Terraform Cloud (TFC)

Terraform Cloud is available since September 2019. It is free, no credit card needed, up to 5 users. On premise option is available using Terraform Enterprise software.

• https://app.terraform.io/

• VCS Connection: GitHub, GitLab, Bitbucket, Azure DevOps
• Controlled remote state Access (May 2021) feature in Terraform Cloud and Terraform Enterprise, users now have a new way to establish granular controls for state accessibility.
• Execution modes: Remote / local
• Auto apply: on / off
• Secret storage
• RBAC (Role Based Access Control) (Paid feature)
• Cost estimation (Related: aws cloudformation estimate-template-cost)
• Export audit logs to external systems via an API, or export their outputs into Splunk
• Single sign-on (SSO)
• Self hosted agents

Pricing

https://www.hashicorp.com/products/terraform/pricing

• Free: Private module registry
• Team & Governance: Team management, Sentinel
• Business: Terraform Cloud Agents

Sign up: HCP acccount or email

Terraform Cloud getting started

terraform login 
git clone https://github.com/hashicorp/tfc-getting-started.git 
cd tfc-getting-started && ./scripts/setup.sh

Errors

• Error: configuring Terraform AWS Provider: no valid credential sources for Terraform AWS Provider found.
• Error: configuring Terraform AWS Provider: failed to get shared config profile

Related terms

• Sentinel
• Terraform Cloud Business tier integrates with Okta, AzureAD, or any other SAML 2.0 compliant Identity
• Terraform variables: https://www.terraform.io/cloud-docs/workspaces/variables
• Organization
• Terraform registry: private
• .github/workflows/terraform.yml
• TF_CLOUD_ORGANIZATION
• AWS Control Tower Account Factory for Terraform (AFT)
• Terraform provider: tfe

Activities

• Read about Terraform Cloud Run Triggers (Feb 2020) https://www.hashicorp.com/blog/creating-infrastructure-pipelines-with-terraform-cloud-run-triggers/
• [[After many years of using Terraform Open Source (OSS), you decide to migrate to Terraform Cloud. After the initial configuration, you create a workspace and migrate your existing state and configuration. What Terraform version would the new workspace be configured to use after the migration?]]
• Dynamic Credentials with the AWS Provider
• Bootstrapping trust between a TFC workspace and AWS

See also

• Terraform Cloud (TFC), Terraform Cloud Agents (Business version), terraform login, execution modes, terraform_remote_state, Terraform cloud block, Terraform Cloud Workflows, Terraform organization, TF_CLOUD_ORGANIZATION, Dynamic Provider Credentials, Bootstrapping trust between a TFC workspace and AWS

https://www.hashicorp.com/blog/announcing-terraform-cloud

https://www.hashicorp.com/blog/announcing-controlled-remote-state-access-for-terraform-cloud-and-enterprise