---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Map credentials between Cloud Provisioning and Governance and Terraform

# Map credentials between Cloud Provisioning and Governance and Terraform {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Map credential types and service account fields between Cloud Provisioning and Governance and Terraform using Credential Mapping.

## Before you begin

The latest Cloud Provisioning and Governance: Terraform Connector must be installed from the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/9b04ffc20b1323002530a387b6673a1d/).

Role required:
sn_cmp.cloud_admin, admin

## About this task

Use the Credential Mapping
module to perform credential and service account mappings for datacenter credentials
used by the Terraform provider to provision datacenter resources and
Cloud Provisioning and Governance for discovery.

## Procedure

1. Navigate to AllDesignCredential Mapping.
2. Select New.  
   Figure 1. Terraform Datacenter Mapping form
3. On the form, fill in the fields.  
   {#map-cloud-mgmt-terraform-credentials__table_q1n_4qw_52b__entry__2}

   | Field | Description |
   |-|-|
   | Terraform Provider | Name of the Terraform provider. |
   | Datacenter Block | The resource block whose credentials you are mapping from the lookup table. |
   | Credential Type | The appropriate credential type from the lookup table. For example, Azure Service Principal \[azure_service_principal\]. |
   | Credential Resolver | An appropriate MID Server script include from the lookup table. For example, Search and select the TerraformProviderCredentialResolver script. |
   [Table 1. Terraform Datacenter Mappings form]

   {#map-cloud-mgmt-terraform-credentials__table_q1n_4qw_52b}
4. Select Submit.  
   The Terraform provider credentials record is created and displayed in the Terraform Datacenter Mappings list.
5. On the record you created, navigate to the Credentials Mappings related list, and then select New.
   1. Complete the Credential Mapping form.  
      {#map-cloud-mgmt-terraform-credentials__table_mf4_djk_mjb__entry__2}

      | Field | Description |
      |-|-|
      | Provider Authentication Key | Authentication key (variable) field name as used by the provider. For example, the Terraform provider block for (Amazon Web Services) AWS uses the field <kbd class="ph userinput">secret_key</kbd>. |
      | Discovery Credential Key | The corresponding field in the Discovery credentials from the lookup table. For example, <kbd class="ph userinput">access_key</kbd> field in Terraform corresponds to <kbd class="ph userinput">Secret key</kbd> field in the ServiceNow instance. |
      | Terraform Datacenter Mapping | Datacenter for which you are mapping the credentials. |
      [ ]

      {#map-cloud-mgmt-terraform-credentials__table_mf4_djk_mjb}
   2. Select Submit.
   {#map-cloud-mgmt-terraform-credentials__substeps_pxp_bjk_mjb}
6. Select the Service Account Mappings tab, and then select New.
   1. Complete the Service Account Mapping form.  
      {#map-cloud-mgmt-terraform-credentials__table_wld_bkk_mjb__entry__2}

      | Field | Description |
      |-|-|
      | Provider Authentication Key | Authentication key (variable) field name as used by the provider. For example, the Terraform provider block for AWS uses the field <kbd class="ph userinput">secret_key</kbd>. |
      | Service Account Field | Service Account (variable) field name from the lookup table, whose credentials you are mapping to the Provider Authentication Key. |
      | Terraform Datacenter Mapping | Datacenter for which you are mapping the credentials. |
      [ ]

      {#map-cloud-mgmt-terraform-credentials__table_wld_bkk_mjb}
   2. Select Submit.

   {#map-cloud-mgmt-terraform-credentials__substeps_vld_bkk_mjb}  
   You have mapped the field values that you added under the Credential Mapping and Service Account Mapping related lists to the Terraform provider.

*[\>]: and then