Terraform provider
sazabi_sandbox_cli
Terraform resource for a sandbox CLI connection.
Manages a sandbox CLI connection for a project. The environment variables are the full credential set: an update replaces all previously stored values. Values are encrypted and never returned, so Terraform keeps them in sensitive state to detect changes. Destroying the resource removes only the Terraform-managed fallback.
Example
resource "sazabi_sandbox_cli" "aws" {
type = "aws"
environment_variables = {
AWS_ACCESS_KEY_ID = var.aws_access_key_id
AWS_SECRET_ACCESS_KEY = var.aws_secret_access_key
}
}Arguments
| Attribute | Type | Behavior | Description |
|---|---|---|---|
type | string | Required | CLI type (for example aws, github, kubectl, vercel). Immutable. |
environment_variables | map(string) | Required, Sensitive | Full credential set. Updates replace all values. |
project_id | string | Optional, Computed | Owning project. Defaults to the secret key's project scope. Immutable. |
credential_source | string | Computed | github_app, bitbucket_integration, personal_access_token, or stored_credentials. |
is_system_managed | bool | Computed | Whether an integration currently provides credentials. |
fallback_configured | bool | Computed | Whether fallback credentials exist. |
env_var_keys | set(string) | Computed | Environment variable names after normalization; values omitted. |
id | string | Computed | Composite ID, <project_id>/<type>. |
Import
terraform import sazabi_sandbox_cli.aws "<project_id>/<type>"