Terraform is an open source tool that lets users provision Google Cloud resources with declarative configuration files—resources such as virtual machines, containers, storage, and networking. Terraform's infrastructure-as-code (IaC) approach supports DevOps best practices for change management, managing Terraform configuration files in source control to maintain an ideal provisioning state for testing and production environments.
Terraform's primary function is to support the provisioning of Google resources with configuration management. While Terraform provides some security capabilities specific to Terraform processes (encryption between Terraform Clients, encrypting workspace variables, Isolation between Terraform executions and Cloud tenants) the capabilities do not necessarily mitigate threats across the entire organization. Therefore, this capablity has been identified as not mappable.
| Capability ID | Capability Description | Category | Value | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|---|
| No mappings found for this technique in ATT&CK version . Change versions of ATT&CK or check out a different technique with Matrix View. | ||||||