Terraform integration

What syncs

Projects, domains, environment metadata, access policy, and supported deployment configuration.

Setup

Configure the Apex provider with a scoped API token and store provider credentials in your CI secret manager.

Security

Use separate tokens for plan and apply workflows where practical, and review state-file exposure because resource metadata can contain sensitive configuration.

Operations

Let Terraform own durable infrastructure intent while the deployment pipeline owns application artifacts and release promotion.

Recommended workflow

• Keep the integration credential in a dedicated secret scope.
• Start in a non-production environment and verify the event flow.
• Document ownership so connector failures have a clear operational owner.