Company
Date Published
Author
Kyle Ruddy
Word count
604
Language
English
Hacker News points
None

Summary

Controlled Remote State Access` in `Terraform Cloud` and `Terraform Enterprise` adds a new way to establish granular controls for state accessibility, allowing users to manage which workspaces have access to each other's state files while using the `terraform_remote_state data source`. This feature is designed to help organizations improve security by assessing who has access to what information at every step of their infrastructure provisioning workflow. The default sharing configuration for all new workspaces restricts sharing its state with any other workspaces, but existing workspaces will continue to be globally shared within their organization. Terraform Enterprise customers also find a new setting in the admin portal to configure the default setting for every workspace in that environment to either be shared globally or not shared at all. This feature builds on HashiCorp's security-first posture by adding an additional layer of control and protection for sensitive state files, which can contain information such as passwords or private keys.