How to encrypt terraform state file in azurerm backend

Terraform
1

I used below configuration , I’m able to see plain text in blob
erraform {
required_providers {
azurerm = {
source = “hashicorp/azurerm”
version = “=3.0.2”
}
}
required_version = “>= 1.1.0”
backend “azurerm” {
storage_account_name = “STORAGE_ACCOUNT_NAME”
container_name = “CONTAINER_NAME”
key = “STATE_FILE_NAME”
use_msi = true
resource_group_name = “POD_RESOURCE_GROUP”
subscription_id = “SUBSCRIPTION_ID”
tenant_id = “TENANT_ID”
}

}

2

Terraform does not have built-in support for state file encryption.

If you can access the underlying blob storage, you’ll be able to read the state.

1 Like