fleetworks / warden / features / workspace-records
Workspace records
List, create and update the Terraform Cloud workspaces your organization owns, each mapped to a service, an AWS account and a repo.
A workspace is Warden’s record of a Terraform Cloud workspace, addressed by its unique workspace_name. It maps to one service, one AWS account and one source repo on a VCS tenant, with its region, Terraform version and run settings.
Creating one checks that the service and AWS account belong to your organization, that the VCS tenant is in the catalog, and that the name is not taken. Writing needs org:contributor in that organization; a PAT also needs the workspaces:write scope.
Updating a workspace changes its VCS provider and VCS tenant. Every committed create or update emits an event to your webhook endpoints.
Warden keeps the record. It does not create or run anything in Terraform Cloud today.
More features
All features →- 01
Org-scoped access
Every read is limited to the caller’s organization; roles and a chmod-style Perm mode decide who may change what.
- 02
Deterministic config Review
A fixed rule set checks a stored workspace, PAT or webhook endpoint and reports findings with a severity and a stable rule id.
- 03
Scoped API tokens
Machine callers use wl_ PATs that carry an explicit scope list and an optional pin to one resource.