cloud_compliance_custom_framework

This resource allows managing custom compliance frameworks in the CrowdStrike Falcon Platform.

API Scopes

The following API scopes are required:

• Cloud Security Policies: READ
• Cloud Security Policies: WRITE

Example Usage

terraform {
  required_providers {
    crowdstrike = {
      source = "registry.terraform.io/crowdstrike/crowdstrike"
    }
  }
}

provider "crowdstrike" {
  cloud = "us-2"
}


resource "crowdstrike_cloud_compliance_custom_framework" "example" {
  name        = "example-framework"
  description = "An example framework created with Terraform"
  sections = {
    "section-1" = { // immutable unique key
      name = "Section 1"
      controls = {
        "control-1a" = { // immutable unique key
          name        = "Control 1a"
          description = "This is the first control"
          rules       = ["id1", "id2", "id3"]
        }
        "control-1b" = {
          name        = "Control 1b"
          description = "This is another control in section 1"
          rules       = ["id4", "id5"]
        }
      }
    }
    "section-2" = {
      name = "Section 2"
      controls = {
        "control-2" = {
          name        = "Control 2"
          description = "This is the second control"
          rules       = []
        }
      }
    }
  }
}

output "cloud_compliance_custom_framework" {
  value = crowdstrike_cloud_compliance_custom_framework.example
}

Schema

Required

• description (String) A description of the custom compliance framework.
• name (String) The name of the custom compliance framework.

Optional

• sections (Attributes Map) Map of sections within the framework. Key is an immutable unique string. Changing the section key will trigger a complete delete and create of the section. Sections cannot exist without controls. (see below for nested schema)

Read-Only

• id (String) Identifier for the custom compliance framework.

Nested Schema for sections

Required:

• controls (Attributes Map) Map of controls within the section. Key is an immutable unique string. Changing the control key will trigger a complete delete and create of the control. (see below for nested schema)
• name (String) Display name of the compliance framework section.

Nested Schema for sections.controls

Required:

• description (String) Description of the control.
• name (String) Display name of the compliance framework control.

Optional:

• rules (Set of String) Set of rule IDs assigned to this control.

Read-Only:

• id (String) Identifier for the compliance framework control.

Import

Import is supported using the following syntax:

# Cloud Compliance Custom Framework can be imported by specifying the id.
terraform import crowdstrike_cloud_compliance_custom_framework.example 123e4567-e89b-12d3-a456-426614174000