The first thing we need to do is configure the Integration in the Organization Settings; the steps to achieve this are below
Login to Terraform Cloud and go into the organization global settings.
Navigate to Integrations > Run tasks
Select Create run task
Enter the Endpoint URL and HMAC (Hash based Message Authentication Code) Key provided by Aqua Security. Although the HMAC Key shows as optional, this is required to allow us to authenicate your plan scans.
Click Create run task to validate and save.
The next step is to configure the workspace to use the run task
In the workspace, go to Settings > Run Tasks
From the Available Run Tasks, chose the one for Aquasecurity that you just created
At this point you have a choice between Advisory and Mandatory. If you do not already use Aqua Security Trivy or tfsec, you may wish to set this to Advisory while you deal with any issues it finds.
Click Create to associate the Run Task