scalr_wiz_integration

Resource: scalr_wiz_integration

Manages the state of Wiz integrations in Scalr.

Example Usage

resource "scalr_wiz_integration" "example" {
  name          = "wiz"
  client_id     = "svc-account-client-id"
  client_secret = var.wiz_client_secret

  default_policies = ["Default IaC policy"]
  autofail         = false
  endpoint_mode    = "commercial"

  environments = ["env-xxxxxxxxxx"] # or ["*"] for all environments
}

Schema

Required

• client_id (String) Wiz service-account client ID.
• client_secret (String, Sensitive) Wiz service-account client secret.
• name (String) Name of the Wiz integration.

Optional

• autofail (Boolean) Block the run when the Wiz scan fails or cannot run. When disabled, Wiz failures are represented in the following Scalr policy check and do not block the Wiz stage. Default false.
• default_policies (Set of String) Wiz CI/CD policy names passed to wizcli (--policies), one list item per policy.
• default_scan_name (String) Default scan name passed to wizcli (--name). When unset, scans are named {workspace}-{run}.
• endpoint_mode (String) Wiz tenant region: the commercial, GovCloud, or FedRAMP auth/API host. Valid values are commercial, govcloud, fedramp. Default commercial.
• environments (Set of String) List of environments this integration is linked to. Use ["*"] to allow in all current and future environments.

Read-Only

• id (String) The ID of this resource.

Import

Import is supported using the following syntax:

terraform import scalr_wiz_integration.example in-xxxxxxxxxx