{"slug": "cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane", "title": "Cohesity protects HashiCorp’s self-hosted Terraform hybrid cloud control plane", "summary": "HashiCorp, acquired by IBM in February 2025, has validated Cohesity Data Cloud's cloud rebuild capability as the first cloud data recovery method interoperable with Terraform Self-Managed, letting customers rebuild cloud applications after a cyberattack from Terraform code plus Cohesity backups. Cohesity Chief Product Officer Vasu Murthy said: \"If you build as code, you can now recover as code.\" HashiCorp, which has some 4,400 customers, sells Terraform Self-Managed to organizations that cannot use the SaaS Terraform because of security, compliance, data-residency or air-gapped requirements.", "body_md": "DATA PROTECTION\n\n# Cohesity protects HashiCorp’s self-hosted Terraform hybrid cloud control plane\n\nIBM’s HashiCorp, has validated [Cohesity](https://www.blocksandfiles.com/security/2026/09/16/cohesity-extends-resilience-to-ai-agents-plans-to-automate-cyber-resilience/5296754) Data Cloud's cloud rebuild capability, as the first cloud data recovery method interoperable with Terraform Self-Managed.\n\nCustomers can now rebuild cloud applications after a cyberattack, using Terraform code to restore the declared configuration and Cohesity Data Cloud backups, using cloud rebuild, to restore the latest usable application data\n\nCohesity’s Chief Product Officer, Vasu Murthy, said: “Attackers using AI move faster than any team can rebuild by hand. Organizations have already codified exactly what their cloud environments should look like in Terraform. Cohesity uses that code to recreate the declared configuration, then restores the latest usable application data from backup. Teams need both to bring the application back. If you build as code, you can now recover as code,”\n\nIBM completed its acquisition of [HashiCorp](https://www.hashicorp.com/en) in February 2025, getting software that automated hybrid cloud infrastructure. HashiCorp sells to large enterprises and has some 4,400 customers. Its main offerings are the Terraform Infrastructure-as-Code (IaC) tool and Vault.  \n\nVault is a centralized secrets management and data protection platform. [Terraform](https://www.hashicorp.com/en/products/terraform) is a  SaaS offering that enables customers to define, provision, and manage cloud and on-premises resources using HCL (HashiCorp Configuration Language), used to set out the desired state of infrastructure such as a cloud resources, networking, Kubernetes, databases, etc. Terraform Self-Managed is the self-hosted version of Terraform Enterprise that provides an enterprise-grade, centralized control plane for Terraform that a customer operates in their own environment.\n\nIt is used by customers who cannot use the SaaS Terraform due to security, compliance, data-residency, or air-gapped requirements. There is role-based access control, and Workspaces organize and run Terraform plans, and apply them consistently, with secure shared state instead of local files.\n\nA Cohesity spokesperson told us: “The largest organizations in the world – those that most need these extra security and compliance features - are the most likely to upgrade to Terraform self-managed. The solution has been developed based on that clear market and customer demand.”\n\nIf Terraform suffers a cyber-attack, then Cohesity [Cloud rebuild](https://www.cohesity.com/platform/cloud-rebuild/) uses an organization’s infrastructure-as-code files, which define its cloud networks, servers, and access permissions, as the blueprint for recovery. Terraform uses the organization's reviewed and approved code to recreate the declared configuration, and Cohesity Data Cloud restores the latest usable backed-up  application data. Together, they return the application to a trusted state.\n\nIn a little more detail;\n\n- **Map the application.** Cloud rebuild reads the organization’s Terraform code and creates a detailed map of each cloud resource that needs protection and the order in which resources should be restored.\n- **Save trusted versions.** Cloud rebuild backs up both the Terraform code and the application data over time, so teams can choose a recovery point that pairs the intended configuration with backed-up application data.\n- **Rebuild step by step.** Cloud rebuild recreates the declared infrastructure and configuration from Terraform code, then restores application data from the latest usable backup for that recovery point. For databases such as Amazon RDS, a guided multi-step process walks administrators through reconnecting the restored database to the rest of the application.\n- **Show the timing gap.** Because infrastructure and data can be backed up on separate schedules, Cloud rebuild pairs the closest data backup with the chosen code version and clearly shows how far apart in time the two are. Teams can see which data backup the recovered application will use.\n\nCohesity says some recovery tools restore a copy of production as it looked just before an attack, which can include errors or changes made by the attacker. Instead cloud rebuild restores the environment described by the organization’s own reviewed and approved code, returning applications to their declared configuration and restoring protected data from the selected backup. It can read applications through Terraform's official interface and runs customers' code unchanged, maintaining record accuracy.\n\nTyler Lynch, Outbound CTO, Automation, IBM Software, said: “Our customers have asked how they can recover from an attack leveraging Terraform and it's state, and not just build a new environment. We worked with Cohesity to validate how our technologies work together when they use Terraform state to recover cloud applications, the infrastructure they run on, and the data as part of the recovery process.”\n\nCohesity cloud rebuild is available now as part of Cohesity Data Cloud Enterprise Edition. Existing Cohesity customers running Data Protect or Cohesity NetBackup can upgrade to Enterprise Edition to gain access to cloud rebuild.", "url": "https://wpnews.pro/news/cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane", "canonical_source": "https://www.blocksandfiles.com/data-protection/2026/10/29/cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane/5306379", "published_at": "2026-10-29 14:04:59+00:00", "updated_at": "2026-10-29 14:17:31.430877+00:00", "lang": "en", "topics": ["ai-safety", "ai-infrastructure"], "entities": ["Cohesity", "HashiCorp", "IBM", "Terraform", "Terraform Self-Managed", "Cohesity Data Cloud", "Vasu Murthy", "Vault"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane", "markdown": "https://wpnews.pro/news/cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane.md", "text": "https://wpnews.pro/news/cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane.txt", "jsonld": "https://wpnews.pro/news/cohesity-protects-hashicorps-self-hosted-terraform-hybrid-cloud-control-plane.jsonld"}}