cyber.hendryadrian.com
Security News · elastic.co

Elastic Adds Security-as-Code Resources to Terraform Provider

· Original article ↗

Summary

Elastic’s Terraform provider adds support for managing detection rules, exceptions, prebuilt rules, ML anomaly detection jobs, cross-cluster API keys, and AI connectors as code, enabling versioned and reviewable deployments.

Key points

  • Terraform resources can define, version, and deploy Elastic Security detection rules and prebuilt rules.
  • Exception lists and items can be managed as code, including allowlists for authorized scanners.
  • ML anomaly detection jobs can be configured in HCL and reproduced across environments.
  • Scoped cluster API keys support automated cross-cluster search and replication.
  • The provider adds support for .bedrock and .gen-ai connectors, allowing teams to version AI integrations with infrastructure.
  • Synthetics monitor labels and other observability and platform resources were also added or expanded.

Article Details

Event Type
Product capability announcement
Impact
Starting with release v0.13.1, the Elastic Stack Terraform provider enables teams to manage Elastic Security detection rules, exception lists, prebuilt rules, ML anomaly detection jobs, cross-cluster API keys, and AI connectors as version-controlled, reviewable code. This can improve configuration consistency, auditability, and reproducibility across environments.

Vendors

ElasticThe Elastic Stack Terraform provider now enables security-as-code by letting teams manage detection rules, exception lists, prebuilt rules, ML anomaly detection jobs, synthetics monitors, and AI connectors in HCL for

Products

Elastic SecurityStarting with release v0.13.1, you can manage your Elastic security posture – detection rules, exception lists, and prebuilt rules – alongside ML anomaly detection jobs, synthetics monitors, and AI connectors, all asElastic StackThe Elastic Stack Terraform provider now enables security-as-code by letting teams manage detection rules, exception lists, prebuilt rules, ML anomaly detection jobs, synthetics monitors, and AI connectors in HCL forElastic Stack Terraform providerThe Elastic Stack Terraform provider now enables security-as-code by letting teams manage detection rules, exception lists, prebuilt rules, ML anomaly detection jobs, synthetics monitors, and AI connectors in HCL forElasticsearchObservability and platform coverage expanded with synthetics monitor labels, Elasticsearch alias resource, default data view settings, solution attribute for Kibana spaces, and Fleet agent policy enhancements.KibanaDetection rules can be defined, versioned, and deployed as code using elasticstack_kibana_security_detection_rule, eliminating manual Kibana UI configuration.TerraformThe Elastic Stack Terraform provider now enables security-as-code by letting teams manage detection rules, exception lists, prebuilt rules, ML anomaly detection jobs, synthetics monitors, and AI connectors in HCL for

Related Articles