Tracking Down Ownership of IaC-Generated Non-Human Identities

2025-04-09
Tracking Down Ownership of IaC-Generated Non-Human Identities

Infrastructure as Code (IaC) tools enable rapid creation of numerous non-human identities (NHIs) in cloud environments. However, tracking the owners of these IaC-generated NHIs presents a significant challenge. This blog post explores a tag-based approach, adding tags to Terraform code to trace files involved in resource creation and thus identify NHI owners. While this approach faces practical hurdles like tag inheritance and cross-platform compatibility, it offers a potential solution for IaC-generated NHI ownership issues and assists DevOps teams in better tracking and managing their IaC identities.

Development