Terraform Cloud Project ID

This page explains how to use the Terraform Cloud ID Token Project ID identifier to uniquely identify Terraform workloads running on Terraform Cloud (TFC) using a Terraform Cloud ID Token.

Understanding the Terraform Cloud ID token project ID

When Terraform Cloud executes runs, it can issue an OIDC-compliant identity token that includes an terraform_project_id claim. This value uniquely identifies the Terraform Cloud project under which the workload runs. Aembit uses this value to associate a Terraform run with a specific Client Workload.

For example, an project ID might look like: prj-vegSA59s1XPwMr2t

Applicable deployment type

Aembit supports this identifier only when you use the Aembit Terraform provider.

Create a Client Workload with a Terraform Cloud ID Token identifier

To configure a Client Workload using the Terraform Cloud ID Token identifier, follow these steps:

1. Log into your Aembit Tenant.

2. Click Client Workloads in the left nav pane.

3. Click New, revealing the Client Workload pop out menu.

4. Enter the Name and optional Description for the Client Workload.

5. Under Client Identification, select Terraform Cloud ID Token Project ID.

   For Value, enter the Terraform Cloud Project ID associated with the workload.

   For example: prj-vegSA59s1XPwMr2t

6. Click Save.

   Aembit displays the new Client Workload on the Client Workloads page.

Client Workload identifier uniqueness

When you identify a Client Workload using a single identifier such as this one in a complex environment, this identifier may not always provide sufficient uniqueness.

To avoid Aembit unintentionally matching something beyond what it’s intended to match, Aembit recommends that you set additional identifiers to compliment this one, creating a Client Workload identity that’s unique across your environment.

See Using multiple Client Workload identifiers for guidance on combining this identifier with more specific identifiers such as those on the Client Workload Identifiers overview page, which includes vendor- and technology-specific identifiers.

Find Terraform cloud project ID

1. Log into Terraform Cloud.
2. Choose your organization.
3. In the left navigation menu, click Projects.
4. Choose your project.
5. The top of the page displays the Project ID, labeled as ID.