IBM’s HashiCorp has validated Cohesity Data Cloud’s cloud rebuild capability, marking it as the first cloud data recovery method interoperable with Terraform Self-Managed.
Following a cyberattack, customers can rebuild cloud applications by combining Terraform code to restore the declared configuration and Cohesity Data Cloud backups via cloud rebuild to recover the latest usable application data.
Vasu Murthy, Cohesity’s Chief Product Officer, commented: “AI-powered attackers move faster than manual recovery teams. Businesses already codify their ideal cloud state in Terraform. Cohesity leverages that code to recreate the declared configuration, then restores the freshest usable application data from backup. Both elements are required to fully restore an application. If you build as code, you can now recover as code.”
IBM closed its acquisition of HashiCorp in February 2025, gaining hybrid cloud infrastructure automation software. HashiCorp serves large enterprises with roughly 4,400 customers, anchored by its Terraform Infrastructure-as-Code (IaC) tool and Vault.
Vault delivers centralized secrets management and data protection. Terraform SaaS lets users define, provision and manage cloud and on-premises resources via HCL to specify desired infrastructure state for cloud assets, networking, Kubernetes clusters, databases and more. Terraform Self-Managed is the self-hosted variant of Terraform Enterprise, offering an enterprise-grade, customer-operated centralized control plane.
It caters to organizations barred from Terraform SaaS by security, compliance, data residency or air-gapped constraints. It supports role-based access control and uses Workspaces to organize, execute and consistently apply Terraform plans with secure shared state rather than local files.
A Cohesity spokesperson noted: “The world’s largest enterprises — the ones with the greatest need for these enhanced security and compliance controls — are the prime candidates for Terraform Self-Managed upgrades. This solution was built to address that clear market and customer demand.”
Should Terraform itself fall victim to a cyber incident, Cohesity Cloud Rebuild uses the organization’s IaC files, which define cloud networks, servers and access policies, as the recovery blueprint. Terraform redeploys the approved, audited code to reconstruct the declared configuration, while Cohesity Data Cloud restores the latest valid application backup data. Combined, they return the application to a trusted state.
The workflow works as follows:
Map the application: Cloud Rebuild parses Terraform code to generate a detailed inventory of protected cloud resources and the correct restoration sequence.
Save trusted versions: It maintains historical backups of both Terraform code and application data, letting teams select a recovery point pairing the intended configuration with matching backup data.
Rebuild step by step: It reconstructs the declared infrastructure from Terraform code first, then restores application data from the matching usable backup. For databases such as Amazon RDS, a guided multi-step workflow helps admins reconnect the restored database to the wider application stack.
Show the timing gap: Since infrastructure and data backups often run on separate schedules, Cloud Rebuild matches the nearest available data backup to the selected code revision and clearly displays the time offset between them, so teams know exactly which data snapshot will be used.
Cohesity distinguishes its approach from tools that simply restore a pre-attack production copy, which may retain attacker modifications or corruption. Cloud Rebuild restores the environment defined by the enterprise’s own reviewed, approved code, resetting applications to their declared configuration and layering on protected data from the chosen backup. It interfaces through Terraform’s official APIs and runs customer code unmodified to preserve accuracy.
Tyler Lynch, Outbound CTO for Automation at IBM Software, stated: “Customers wanted a way to recover post-breach using Terraform and its state, not just spin up a fresh environment. We collaborated with Cohesity to validate joint operation: using Terraform state to recover cloud applications, their underlying infrastructure, and associated data in one recovery process.”
Cohesity Cloud Rebuild is generally available as a component of Cohesity Data Cloud Enterprise Edition. Existing Cohesity customers on Data Protect or Cohesity NetBackup may upgrade to Enterprise Edition to access this feature.
Beijing Qianxing Jietong Technology Co., Ltd.
Sandy Yang/Global Strategy Director
WhatsApp / WeChat: +86 13426366826
Email: yangyd@qianxingdata.com
Website: www.qianxingdata.com/www.storagesserver.com
Business Focus:
ICT Product Distribution/System Integration & Services/Infrastructure Solutions
With 20+ years of IT distribution experience, we partner with leading global brands to deliver reliable products and professional services.
“Using Technology to Build an Intelligent World”Your Trusted ICT Product Service Provider!
コンタクトパーソン: Ms. Sandy Yang
電話番号: 13426366826
Japanese
