HashiCorp Terraform

Record your HashiCorp Terraform connection as infrastructure evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In HashiCorp Terraform:

   1. Least privilege (recommended): create a team in HCP Terraform whose workspace access is read-only, then go to Organization settings › API Tokens and open the Team Tokens tab.
   2. Create a token for that team with a unique description and an expiration, then copy it; it is displayed only once and obfuscated afterwards.
   3. Alternative: as an organization owner, go to Organization settings › API Tokens and use the controls under Organization Tokens to create the organization token (one valid token per organization; it is shown only once).

   Where to find the other values:

   • Organization name: Your HCP Terraform organization's name.
   • HCP Terraform host: app.terraform.io for HCP Terraform, or app.eu.terraform.io if your organization is in HCP Europe (the host in your browser's address bar).

   HashiCorp Terraform shows the secret only once, so copy it before you leave the page.

   Team tokens carry the team's workspace access; owners or users with manage-teams permission manage them. Organization tokens can be created or revoked only by owners, cannot start runs, and replace any existing organization token. Exact create-button labels were not quoted on the fetched page.

   Source: developer.hashicorp.com, checked 2026-10-07.

2. On Compliance › Connectors, open HashiCorp Terraform, click Connect, choose API token and fill in:

   Field	What to enter
   Organization or team API token	Required. Create under Organization settings → API tokens. HCP Terraform has no OAuth sign-in for integrations. Stored encrypted and never shown again.
   Organization name	Required.
   HCP Terraform host	Optional. app.terraform.io, or app.eu.terraform.io for HCP Europe. Self-hosted Terraform Enterprise is not supported.

3. Click Connect with token.

Frameworks

No automated compliance test reads HashiCorp Terraform yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Infrastructure connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks