cloud_compliance_frameworks

This data source provides information about compliance frameworks, built-in and custom, in the CrowdStrike Falcon Platform. Return every framework, narrow the set with an FQL filter, or hydrate a specific list of framework identifiers.

API Scopes

The following API scopes are required:

• Cloud Security Policies: READ

Example Usage

terraform {
  required_providers {
    crowdstrike = {
      source = "registry.terraform.io/crowdstrike/crowdstrike"
    }
  }
}

provider "crowdstrike" {
  cloud = "us-2"
}

# List every compliance framework, built-in and custom.
data "crowdstrike_cloud_compliance_frameworks" "all" {}

# Narrow the set with an FQL filter. List all CIS benchmarks.
data "crowdstrike_cloud_compliance_frameworks" "cis" {
  filter = "compliance_framework_authority:'CIS'"
}

# Look up a specific set of frameworks by identifier. Cannot be combined with filter.
data "crowdstrike_cloud_compliance_frameworks" "by_ids" {
  ids = [
    "3d67d331-d697-42f2-a3e1-e5db2e5f5f0f",
    "8f2b1c4a-1234-4a5b-9c8d-0e1f2a3b4c5d",
  ]
}

# Reference the returned frameworks elsewhere.
output "cis_framework_names" {
  value = data.crowdstrike_cloud_compliance_frameworks.cis.frameworks[*].name
}

Filtering

By default this data source returns every compliance framework, built-in and custom. Narrow the results with one of two mutually exclusive arguments:

• filter: a Falcon Query Language (FQL) expression. A filter may match any number of frameworks; a filter that matches nothing returns an empty list.
• ids: an explicit list of framework identifiers to look up.

Setting both filter and ids is an error. The filterable properties are:

• compliance_framework_name
• compliance_framework_version
• compliance_framework_authority

The framework identifier is not filterable; use ids to look frameworks up by identifier. See the Example Usage above for examples.

Schema

Optional

• filter (String) FQL filter used to narrow the frameworks returned. Filterable properties are compliance_framework_name, compliance_framework_version, and compliance_framework_authority, for example compliance_framework_authority:'CIS'. Cannot be combined with ids. If neither filter nor ids is set, all frameworks are returned.
• ids (List of String) List of compliance framework identifiers to look up. Cannot be combined with filter. If neither filter nor ids is set, all frameworks are returned.

Read-Only

• frameworks (Attributes List) The list of compliance frameworks matching the selection. Empty when nothing matches. (see below for nested schema)

Nested Schema for frameworks

Read-Only:

• active (Boolean) Whether the compliance framework is active.
• authority (String) The authority that defines the compliance framework, for example CIS for a built-in benchmark or Custom for a user-defined framework.
• description (String) A description of the compliance framework.
• id (String) Identifier for the compliance framework.
• name (String) The name of the compliance framework.
• version (String) The version of the compliance framework. Custom frameworks are created with version 1.0; built-in frameworks carry the version of the benchmark release.