Changing terraform AFT distribution

0

Do's anybody know is it possible to change terraform AFT "oss" distribution to terraform cloud?

With terraform_ distribution = "oss" it keeps track all account requests and account state histori in AFT AWS account but if i change the distribution system from "oss" to "tfc" then all data will kept secured in terraform cloud. So how i can migrate Account request, AFT customizations, ,Account customizations and Global customizations tf state files to tfc workspaces?

-Juha

JuhaW
asked 2 months ago130 views
1 Answer
1

AFT migration from Terraform Open Source to Terraform cloud.  The general process we're going to follow:

  1. Use any scripts to migrate the state files for account request and customizations from S3 to account request workspace and the customization workspaces of Terraform Cloud. (Or running a “terraform init” with an updated backend would migrate the state for you.)
  2. Reconfigure AFT to Terraform Cloud.
  3. Update the API helper scripts to be compatible with TFC if necessary. (many of our API helper scripts are TFC dependent)
  4. Validate the change by invoking customizations for a single account.

When you select Terraform Cloud as your distribution, provide the following input parameters:

terraform_distribution = "tfc"

terraform_token – This parameter contains the value of the Terraform Cloud token. AFT marks the as sensitive and stores the value as a secure string in the SSM parameter store in the AFT management account. We recommend that you periodically rotate the value of the Terraform token according to your company's security policies and compliance guidelines. The Terraform token should be a User or Team level API token. Organization tokens are not supported.

terraform_org_name – This parameter contains the name of your Terraform Cloud organization.

Note: Multiple AFT deployments in a single Terraform Cloud organization is not supported.

[+]https://docs.aws.amazon.com/controltower/latest/userguide/version-supported.html

AWS
merinkj
answered 13 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions