Skip to main content

Sensitive Terraform Data

Overmind will never expose or transfer any Terraform secrets. Overmind processes Terraform plans locally, extracting the information we need, this information is:

  • The attributes of the terraform resource before and after the plan: So that we can show you what will change
  • A mapping query that contains the unique ID of the resource: So that Overmind can find the corresponding resource in AWS
  • The state of the resource (Added, deleted, etc.): So that we can show you what will happen to it

Within a Terraform plan, sensitive values are stored in a separate data structure which we explicitly do not include in the data that is sent to Overmind.

Here's a diagram of how it works:

Diagram of how Overmind processes your data and what is sent where

Need further information?​

If you require any further information regarding our sensitive data policies please feel free to get in touch.