Wiz and HCP Terraform Integration Adds IaC Scanning and Code-to-Cloud Mapping
Summary
Wiz says its HCP Terraform and Terraform Enterprise integration scans infrastructure plans for policy issues and maps deployed cloud resources to their Terraform definitions to help teams prevent and remediate misconfigurations.
Key points
- Wiz says it can scan each infrastructure plan after the Terraform plan stage using a run task in HCP Terraform and Terraform Enterprise.
- Teams can apply Wiz policies across IaC code, pipelines, and runtime; configured policies can block deployments.
- The generally available HCP Terraform connector uses Terraform state files to link cloud resources to their source declarations.
- Wiz says findings can identify the relevant file, line, module, author, and code owners to support targeted fixes.
- The article describes a workflow in which developers fix findings in code, redeploy through HCP Terraform, and Wiz checks remediation.
- The article says future integrations will add automation frameworks for remediation; it does not describe those capabilities as currently available.
Article Details
- Event Type
- Product integration launch
- Impact
- Wiz and HashiCorp introduced an integration connecting Wiz with HCP Terraform and Terraform Enterprise. It scans infrastructure plans before deployment, can block plans that violate configured policies, and maps deployed cloud resources back to their Terraform definitions to support remediation. The article reports no security incident or breach.
People
Vendors
HashiCorpdefinitions in Terraform, teams can standardize, review, and reuse patterns across every environment. HashiCorp has been instrumental in democratizing IaC, and HCP Terraform further enhances this by abstracting awayWizWiz and HashiCorp have built an answer that meets teams where they work. Our integration closes the loop between what’s in your code and what’s running in the cloud. This allows you to prevent risky changes before they
Products
HCP Terraformreuse patterns across every environment. HashiCorp has been instrumental in democratizing IaC, and HCP Terraform further enhances this by abstracting away much of the complexity of cloud deployments. OneTerraform Enterpriseissues before they reach production. By integrating Wiz as a run task within HCP Terraform and Terraform Enterprise, every infrastructure plan is automatically scanned after the terraform plan stage.