Commander Terraform 1.2

Released on July 17, 2026

This release brings KeeperPAM infrastructure provisioning to Terraform. Teams can now define PAM Configurations, PAM resource records (machines, users, databases, directories, and remote browsers), and Keeper Secrets Manager applications entirely as code — alongside expanded folder management that adds Nested Shared Folders and non-shared (private) folders. Together, these additions enable end-to-end, declarative deployment of privileged access environments, from Gateway configuration through target resources and credential sharing.

New Capabilities

KeeperPAM

• New commander_pam_configuration resource and data source — define PAM Configurations (environment, Gateway association, rotation schedules, port mappings) and enable capabilities like connections, tunneling, rotation, remote browser isolation, and session/typescript recording as code.

Classic PAM Records

• New resources and data sources for all classic PAM record types: commander_classic_pam_machine, commander_classic_pam_user, commander_classic_pam_database, commander_classic_pam_directory, and commander_classic_pam_remote_browser
• Each supports full PAM settings and per-user share permissions directly in your Terraform configuration.

Secrets Manager

• New commander_secrets_manager resource and data source — create and manage Keeper Secrets Manager applications, including application users and secret/folder shares with editability controls.

Folder Management

• New commander_new_folder resource and data source for Nested Shared Folders (NSF)
• New commander_non_shared_folder resource and data source for private (non-shared) folders
• Enhanced commander_shared_folder (classic): new folder_location attribute for placing folders under a parent path, plus support for granting permissions to teams (by name or UID) in addition to users.

Resources

• Terraform Documentation
• Keeper Documentation
• Github Repo
• Github Release
• Commander Service Mode REST API