Terraform workflow for Run Tasks enforcement

Configure policy-based Terraform Run Tasks enforcement.

You can declaratively dictate which infrastructure misconfigurations or exposed secrets trigger a Run Task failure during the Terraform plan phase. This blocks insecure infrastructure deployments through HCP Terraform.

Prerequisites

The HCP Terraform Run Task integration must already be established. Target Asset Groups must also be defined.

Configuration

Use the cortexcloud_appsec_policy resource to define finding types and conditions.

How it works

When HCP Terraform triggers the Run Task, Cortex Cloud evaluates the cicd_trigger actions in this policy. The result determines whether the plan is blocked.

For more information, refer to Manage resources.