# env zero docs

## Docs

- [Assign agents to projects](https://docs.envzero.com/api-reference/agents-settings/assign-agents-to-projects.md): Assign projects to agents, send a request body where each key represents a Project ID and the corresponding value is the Agent Key assigned to that project. Request Body Example: ```json {     "projectId1": "agentKey1",     "projectId2": "agentKey2" } ```
- [Create agent](https://docs.envzero.com/api-reference/agents-settings/create-agent.md): Create a new self-hosted agent
- [Create agent secret](https://docs.envzero.com/api-reference/agents-settings/create-agent-secret.md): Creates a new secret for an agent. Returns the plain secret value once.
- [Delete agent](https://docs.envzero.com/api-reference/agents-settings/delete-agent.md): Delete an agent (soft delete)
- [Get agent](https://docs.envzero.com/api-reference/agents-settings/get-agent.md): Get agent details by key
- [Get agent assignments of projects](https://docs.envzero.com/api-reference/agents-settings/get-agent-assignments-of-projects.md): returns the current default agent key and a map of project ids to agent key assignments
- [Get agent .env file content (Deprecated)](https://docs.envzero.com/api-reference/agents-settings/get-agent-env-file-content-deprecated.md): Deprecated. Not supported for agents created via the UI, API, or Terraform provider.
- [Get agent secrets metadata](https://docs.envzero.com/api-reference/agents-settings/get-agent-secrets-metadata.md): Returns metadata for all secrets associated with an agent (does not return secret values)
- [Get agent values file content (Deprecated)](https://docs.envzero.com/api-reference/agents-settings/get-agent-values-file-content-deprecated.md): Deprecated. Not supported for agents created via the UI, API, or Terraform provider.
- [Get the agent assignment of a project](https://docs.envzero.com/api-reference/agents-settings/get-the-agent-assignment-of-a-project.md): Returns the assigned agent
- [List agents](https://docs.envzero.com/api-reference/agents-settings/list-agents.md): Get a list of the organization agents
- [Revoke agent secret](https://docs.envzero.com/api-reference/agents-settings/revoke-agent-secret.md): Delete an agent secret (immediate and irreversible)
- [Set default agent for organization](https://docs.envzero.com/api-reference/agents-settings/set-default-agent-for-organization.md): sets the default agent for the organization
- [Update agent](https://docs.envzero.com/api-reference/agents-settings/update-agent.md): Update agent properties
- [Assign Approval Policy To Scope](https://docs.envzero.com/api-reference/approval-policy/assign-approval-policy-to-scope.md)
- [Create Approval Policy](https://docs.envzero.com/api-reference/approval-policy/create-approval-policy.md)
- [Delete Approval Policy](https://docs.envzero.com/api-reference/approval-policy/delete-approval-policy.md)
- [Get Approval Policy Assignments By Scope](https://docs.envzero.com/api-reference/approval-policy/get-approval-policy-assignments-by-scope.md)
- [Get Approval Policy By Name](https://docs.envzero.com/api-reference/approval-policy/get-approval-policy-by-name.md)
- [Get Policy Catalog](https://docs.envzero.com/api-reference/approval-policy/get-policy-catalog.md): Returns a list of available policy templates for the policy catalog
- [List Approval Policies](https://docs.envzero.com/api-reference/approval-policy/list-approval-policies.md): Returns all approval policies associated with an organization.
- [Unassign Approval Policy by assignment id](https://docs.envzero.com/api-reference/approval-policy/unassign-approval-policy-by-assignment-id.md)
- [Unassign Approval Policy From Scope](https://docs.envzero.com/api-reference/approval-policy/unassign-approval-policy-from-scope.md)
- [Update Existing Approval Policy](https://docs.envzero.com/api-reference/approval-policy/update-existing-approval-policy.md)
- [Fetch Audit Logs](https://docs.envzero.com/api-reference/audit-events/fetch-audit-logs.md)
- [Bulk approve](https://docs.envzero.com/api-reference/bulk-operations/bulk-approve.md)
- [Bulk archive](https://docs.envzero.com/api-reference/bulk-operations/bulk-archive.md)
- [Bulk cancel queued deployments](https://docs.envzero.com/api-reference/bulk-operations/bulk-cancel-queued-deployments.md)
- [Bulk deploy](https://docs.envzero.com/api-reference/bulk-operations/bulk-deploy.md)
- [Bulk deploy](https://docs.envzero.com/api-reference/bulk-operations/bulk-deploy-1.md)
- [Bulk destroy](https://docs.envzero.com/api-reference/bulk-operations/bulk-destroy.md)
- [Bulk lock](https://docs.envzero.com/api-reference/bulk-operations/bulk-lock.md)
- [Bulk run task](https://docs.envzero.com/api-reference/bulk-operations/bulk-run-task.md)
- [Bulk unlock](https://docs.envzero.com/api-reference/bulk-operations/bulk-unlock.md)
- [Create Cloud Account](https://docs.envzero.com/api-reference/cloud-compass/create-cloud-account.md)
- [Delete Cloud Account](https://docs.envzero.com/api-reference/cloud-compass/delete-cloud-account.md)
- [Find Cloud Account by id](https://docs.envzero.com/api-reference/cloud-compass/find-cloud-account-by-id.md)
- [Find Cloud Resources](https://docs.envzero.com/api-reference/cloud-compass/find-cloud-resources.md)
- [Find Trends Data](https://docs.envzero.com/api-reference/cloud-compass/find-trends-data.md)
- [Generate IaC for Cloud Resources](https://docs.envzero.com/api-reference/cloud-compass/generate-iac-for-cloud-resources.md)
- [Get a link to resource's change event](https://docs.envzero.com/api-reference/cloud-compass/get-a-link-to-resources-change-event.md)
- [Get Event By ID](https://docs.envzero.com/api-reference/cloud-compass/get-event-by-id.md)
- [Get Resource Events](https://docs.envzero.com/api-reference/cloud-compass/get-resource-events.md)
- [List Organization's Cloud Accounts](https://docs.envzero.com/api-reference/cloud-compass/list-organizations-cloud-accounts.md): Returns all Cloud Accounts associated with an organization.
- [Test Cloud Account](https://docs.envzero.com/api-reference/cloud-compass/test-cloud-account.md)
- [Update Cloud Account](https://docs.envzero.com/api-reference/cloud-compass/update-cloud-account.md)
- [Update Cloud Resources](https://docs.envzero.com/api-reference/cloud-compass/update-cloud-resources.md)
- [Generate Code For Issue](https://docs.envzero.com/api-reference/code-optimizer-beta/generate-code-for-issue.md): Trigger code generation for a specific issue
- [Get Issue](https://docs.envzero.com/api-reference/code-optimizer-beta/get-issue.md): Retrieve a single code issue with its relevant environments
- [Get Issues](https://docs.envzero.com/api-reference/code-optimizer-beta/get-issues.md): Retrieve code quality issues for an organization, optionally filtered by state
- [Get Latest Scan Status](https://docs.envzero.com/api-reference/code-optimizer-beta/get-latest-scan-status.md): Get the overall scan status for all repositories in an organization, including the timestamp of the most recent completed scan
- [Get Repository States](https://docs.envzero.com/api-reference/code-optimizer-beta/get-repository-states.md): Retrieve scan status for all repositories in an organization, including error messages for failed scans
- [Ignore Issue](https://docs.envzero.com/api-reference/code-optimizer-beta/ignore-issue.md): Change issue state to IGNORED
- [Trigger Code Scan](https://docs.envzero.com/api-reference/code-optimizer-beta/trigger-code-scan.md): Trigger a static code analysis scan
- [Unignore Issue](https://docs.envzero.com/api-reference/code-optimizer-beta/unignore-issue.md): Change issue state back from IGNORED
- [Assign sets to entity](https://docs.envzero.com/api-reference/configuration/assign-sets-to-entity.md)
- [Associate credentials with project](https://docs.envzero.com/api-reference/configuration/associate-credentials-with-project.md): Associate cloud provider, kubernetes or vault deployment credentials to Project
- [Create a configuration set](https://docs.envzero.com/api-reference/configuration/create-a-configuration-set.md)
- [Create a git token](https://docs.envzero.com/api-reference/configuration/create-a-git-token.md)
- [Create a new SSH key](https://docs.envzero.com/api-reference/configuration/create-a-new-ssh-key.md)
- [Create Credentials](https://docs.envzero.com/api-reference/configuration/create-credentials.md): Create a set of new cloud provider, kubernetes, vault or cost credentials for an Organization which may then be associated with a Project
- [Create or update variable](https://docs.envzero.com/api-reference/configuration/create-or-update-variable.md)
- [Delete a configuration set](https://docs.envzero.com/api-reference/configuration/delete-a-configuration-set.md)
- [Delete a git token](https://docs.envzero.com/api-reference/configuration/delete-a-git-token.md)
- [Delete a variable](https://docs.envzero.com/api-reference/configuration/delete-a-variable.md)
- [Delete Credentials](https://docs.envzero.com/api-reference/configuration/delete-credentials.md)
- [Delete SSH key](https://docs.envzero.com/api-reference/configuration/delete-ssh-key.md)
- [Dissociate credentials with project](https://docs.envzero.com/api-reference/configuration/dissociate-credentials-with-project.md): Dissociate cloud provider, kubernetes or vault deployment credentials with Project
- [Find sets assigned to scope](https://docs.envzero.com/api-reference/configuration/find-sets-assigned-to-scope.md)
- [For creating or updating log forwarding configuration](https://docs.envzero.com/api-reference/configuration/for-creating-or-updating-log-forwarding-configuration.md): Log forwarding configuration is used to forward logs to external services
- [For deleting log forwarding configuration](https://docs.envzero.com/api-reference/configuration/for-deleting-log-forwarding-configuration.md)
- [For finding log forwarding configuration](https://docs.envzero.com/api-reference/configuration/for-finding-log-forwarding-configuration.md)
- [Get configuration set by its ID](https://docs.envzero.com/api-reference/configuration/get-configuration-set-by-its-id.md)
- [Get git token by id](https://docs.envzero.com/api-reference/configuration/get-git-token-by-id.md)
- [List all available SSH keys](https://docs.envzero.com/api-reference/configuration/list-all-available-ssh-keys.md)
- [List deployment credentials by project id](https://docs.envzero.com/api-reference/configuration/list-deployment-credentials-by-project-id.md): List deployment credentials by project id
- [List git tokens](https://docs.envzero.com/api-reference/configuration/list-git-tokens.md)
- [List Organization credentials](https://docs.envzero.com/api-reference/configuration/list-organization-credentials.md)
- [List Sets created by Scope](https://docs.envzero.com/api-reference/configuration/list-sets-created-by-scope.md)
- [List Variables by Scope](https://docs.envzero.com/api-reference/configuration/list-variables-by-scope.md): Lists all variables for the provided scope(s). If more than one scope is given - variables will be overridden by lower level scopes - just like env0 does. For example - Provided both organizationId and projectId, if a variable exists on both scopes, a single instance of it will be returned, with its…
- [Query configuration variable by id](https://docs.envzero.com/api-reference/configuration/query-configuration-variable-by-id.md)
- [Unassign sets from entity](https://docs.envzero.com/api-reference/configuration/unassign-sets-from-entity.md)
- [Update a configuration set](https://docs.envzero.com/api-reference/configuration/update-a-configuration-set.md)
- [Update an existing SSH key](https://docs.envzero.com/api-reference/configuration/update-an-existing-ssh-key.md)
- [Update Credentials](https://docs.envzero.com/api-reference/configuration/update-credentials.md): Update deployment credentials or cost credentials for an organization
- [Associate Cost Credentials with Project](https://docs.envzero.com/api-reference/cost/associate-cost-credentials-with-project.md): Associate Cloud provider Cost Credentials to a Project. This will enable cost tagging in deployments in the project.
- [Dissociate Cost Credentials from Project](https://docs.envzero.com/api-reference/cost/dissociate-cost-credentials-from-project.md): Dissociate Cloud provider Cost Credentials to a Project. This will disable cost tagging in deployments in the project.
- [Get a project's accumulated costs](https://docs.envzero.com/api-reference/cost/get-a-projects-accumulated-costs.md)
- [Get a project's budget](https://docs.envzero.com/api-reference/cost/get-a-projects-budget.md)
- [Get costs for a Project](https://docs.envzero.com/api-reference/cost/get-costs-for-a-project.md)
- [Get costs for an Environment](https://docs.envzero.com/api-reference/cost/get-costs-for-an-environment.md)
- [Get costs for an Organization](https://docs.envzero.com/api-reference/cost/get-costs-for-an-organization.md)
- [Get projects' budget summary of the current period](https://docs.envzero.com/api-reference/cost/get-projects-budget-summary-of-the-current-period.md)
- [Get weekly costs for projects or environments](https://docs.envzero.com/api-reference/cost/get-weekly-costs-for-projects-or-environments.md)
- [List Cost Credentials associated to Project](https://docs.envzero.com/api-reference/cost/list-cost-credentials-associated-to-project.md)
- [List projects with cost credentials associated to organization](https://docs.envzero.com/api-reference/cost/list-projects-with-cost-credentials-associated-to-organization.md)
- [Remove a project's budget](https://docs.envzero.com/api-reference/cost/remove-a-projects-budget.md)
- [Return wether or not cost is enabled for a project](https://docs.envzero.com/api-reference/cost/return-wether-or-not-cost-is-enabled-for-a-project.md)
- [Upsert a project's budget](https://docs.envzero.com/api-reference/cost/upsert-a-projects-budget.md)
- [Create API Key](https://docs.envzero.com/api-reference/credentials/create-api-key.md)
- [Create personal API Key](https://docs.envzero.com/api-reference/credentials/create-personal-api-key.md)
- [Delete a User's personal API Key endpoint](https://docs.envzero.com/api-reference/credentials/delete-a-users-personal-api-key-endpoint.md)
- [Delete an API Key](https://docs.envzero.com/api-reference/credentials/delete-an-api-key.md)
- [List Organization API Keys](https://docs.envzero.com/api-reference/credentials/list-organization-api-keys.md)
- [List User's personal API Keys endpoint](https://docs.envzero.com/api-reference/credentials/list-users-personal-api-keys-endpoint.md)
- [Assign Custom Flow](https://docs.envzero.com/api-reference/custom-flow/assign-custom-flow.md)
- [Create Custom Flow](https://docs.envzero.com/api-reference/custom-flow/create-custom-flow.md)
- [Delete Custom Flow](https://docs.envzero.com/api-reference/custom-flow/delete-custom-flow.md)
- [Find Custom Flows](https://docs.envzero.com/api-reference/custom-flow/find-custom-flows.md)
- [Get Custom Flow Assignments](https://docs.envzero.com/api-reference/custom-flow/get-custom-flow-assignments.md)
- [Unassign Custom Flow](https://docs.envzero.com/api-reference/custom-flow/unassign-custom-flow.md)
- [Update Custom Flow](https://docs.envzero.com/api-reference/custom-flow/update-custom-flow.md)
- [Get query result](https://docs.envzero.com/api-reference/dashboard/get-query-result.md)
- [Find all steps by Deployment Id](https://docs.envzero.com/api-reference/deployment-logs/find-all-steps-by-deployment-id.md)
- [Get logs for specific step](https://docs.envzero.com/api-reference/deployment-logs/get-logs-for-specific-step.md)
- [Connect to migration source](https://docs.envzero.com/api-reference/environment-import/connect-to-migration-source.md)
- [Delete a migration session](https://docs.envzero.com/api-reference/environment-import/delete-a-migration-session.md)
- [Discover Unimported Environments](https://docs.envzero.com/api-reference/environment-import/discover-unimported-environments.md)
- [Find Discovered Environments](https://docs.envzero.com/api-reference/environment-import/find-discovered-environments.md)
- [Finish a migration session](https://docs.envzero.com/api-reference/environment-import/finish-a-migration-session.md)
- [Get a migration session by ID](https://docs.envzero.com/api-reference/environment-import/get-a-migration-session-by-id.md)
- [Get active migration session for an organization](https://docs.envzero.com/api-reference/environment-import/get-active-migration-session-for-an-organization.md)
- [Get migration inventory for a session](https://docs.envzero.com/api-reference/environment-import/get-migration-inventory-for-a-session.md)
- [Get migration results for a session](https://docs.envzero.com/api-reference/environment-import/get-migration-results-for-a-session.md)
- [Get Selection Issues](https://docs.envzero.com/api-reference/environment-import/get-selection-issues.md)
- [Go live — lock TFC workspaces and unlock env0 environments](https://docs.envzero.com/api-reference/environment-import/go-live-—-lock-tfc-workspaces-and-unlock-env0-environments.md)
- [Import Discovered Environments](https://docs.envzero.com/api-reference/environment-import/import-discovered-environments.md)
- [Rerun environments which failed to import](https://docs.envzero.com/api-reference/environment-import/rerun-environments-which-failed-to-import.md)
- [Skip or unskip a workspace](https://docs.envzero.com/api-reference/environment-import/skip-or-unskip-a-workspace.md)
- [Start migration for selected workspaces](https://docs.envzero.com/api-reference/environment-import/start-migration-for-selected-workspaces.md)
- [Trigger scan of migration source organization](https://docs.envzero.com/api-reference/environment-import/trigger-scan-of-migration-source-organization.md)
- [Update variable set secrets](https://docs.envzero.com/api-reference/environment-import/update-variable-set-secrets.md)
- [Update workspace secrets](https://docs.envzero.com/api-reference/environment-import/update-workspace-secrets.md)
- [Create and update environment state access configuration](https://docs.envzero.com/api-reference/environment-outputs/create-and-update-environment-state-access-configuration.md): Creates and update configuration describing which environments, or projects in the organization may access a given environment's state
- [Delete environment state access configuration](https://docs.envzero.com/api-reference/environment-outputs/delete-environment-state-access-configuration.md): Deletes an existing environment state access configuration
- [Get environment state access configuration](https://docs.envzero.com/api-reference/environment-outputs/get-environment-state-access-configuration.md): Describe which environments, or projects in the organization may access a given environment's state
- [Abort Deployment](https://docs.envzero.com/api-reference/environments/abort-deployment.md)
- [Batch Cancel Deployments](https://docs.envzero.com/api-reference/environments/batch-cancel-deployments.md)
- [Cancel Deployment](https://docs.envzero.com/api-reference/environments/cancel-deployment.md)
- [Check Environment meets Project limits](https://docs.envzero.com/api-reference/environments/check-environment-meets-project-limits.md)
- [Count Environments](https://docs.envzero.com/api-reference/environments/count-environments.md)
- [Counts all selected statuses of organization projects](https://docs.envzero.com/api-reference/environments/counts-all-selected-statuses-of-organization-projects.md)
- [Create an Environment Without Template](https://docs.envzero.com/api-reference/environments/create-an-environment-without-template.md)
- [Create Environment](https://docs.envzero.com/api-reference/environments/create-environment.md)
- [Create or Update Workflow Trigger](https://docs.envzero.com/api-reference/environments/create-or-update-workflow-trigger.md): Env0 allows you to configure chained dependent environments to your current environment. Using workflow triggers, you can define which environments would trigger a deployment downstream in response to a deployment of your current environment. This allows you to configure a cascading series of enviro…
- [Deploy Environment](https://docs.envzero.com/api-reference/environments/deploy-environment.md)
- [Destroy Environment](https://docs.envzero.com/api-reference/environments/destroy-environment.md)
- [Find deployment drift status](https://docs.envzero.com/api-reference/environments/find-deployment-drift-status.md)
- [Get a drifted resource's event details](https://docs.envzero.com/api-reference/environments/get-a-drifted-resources-event-details.md)
- [Get a drifted resource's events](https://docs.envzero.com/api-reference/environments/get-a-drifted-resources-events.md)
- [Get Deployment](https://docs.envzero.com/api-reference/environments/get-deployment.md)
- [Get downstream environments that will be triggered by this environment deployment](https://docs.envzero.com/api-reference/environments/get-downstream-environments-that-will-be-triggered-by-this-environment-deployment.md)
- [Get Environment](https://docs.envzero.com/api-reference/environments/get-environment.md)
- [Get Environments Outputs](https://docs.envzero.com/api-reference/environments/get-environments-outputs.md)
- [Get Sub Deployment Log In A Workflow By Workflow Deployment Id And Environment Id](https://docs.envzero.com/api-reference/environments/get-sub-deployment-log-in-a-workflow-by-workflow-deployment-id-and-environment-id.md)
- [List Deployment Resources](https://docs.envzero.com/api-reference/environments/list-deployment-resources.md)
- [List Deployments](https://docs.envzero.com/api-reference/environments/list-deployments.md)
- [List Environments](https://docs.envzero.com/api-reference/environments/list-environments.md)
- [Lock/Unlock environment](https://docs.envzero.com/api-reference/environments/lockunlock-environment.md)
- [Move Environment between Projects](https://docs.envzero.com/api-reference/environments/move-environment-between-projects.md)
- [Remediate Drift Deployment](https://docs.envzero.com/api-reference/environments/remediate-drift-deployment.md): Remediate a drifted environment, using a drift detection deployment ID
- [Rerun PR plan](https://docs.envzero.com/api-reference/environments/rerun-pr-plan.md)
- [Resume Deployment](https://docs.envzero.com/api-reference/environments/resume-deployment.md)
- [Save VCS environment as a template](https://docs.envzero.com/api-reference/environments/save-vcs-environment-as-a-template.md)
- [Scan for Drift Events](https://docs.envzero.com/api-reference/environments/scan-for-drift-events.md)
- [Subscribe environments as workflow-trigger](https://docs.envzero.com/api-reference/environments/subscribe-environments-as-workflow-trigger.md)
- [Unsubscribe environments as workflow-trigger](https://docs.envzero.com/api-reference/environments/unsubscribe-environments-as-workflow-trigger.md)
- [Update Environment](https://docs.envzero.com/api-reference/environments/update-environment.md)
- [Update Environment TTL](https://docs.envzero.com/api-reference/environments/update-environment-ttl.md)
- [Create module](https://docs.envzero.com/api-reference/modules/create-module.md)
- [Delete module](https://docs.envzero.com/api-reference/modules/delete-module.md)
- [Get module](https://docs.envzero.com/api-reference/modules/get-module.md)
- [Get Module README](https://docs.envzero.com/api-reference/modules/get-module-readme.md): Returns the Module README.md file content from a specific version
- [Get Module Test Run by ID](https://docs.envzero.com/api-reference/modules/get-module-test-run-by-id.md)
- [List Module Test Runs](https://docs.envzero.com/api-reference/modules/list-module-test-runs.md)
- [List Module Versions](https://docs.envzero.com/api-reference/modules/list-module-versions.md): Returns all versions of the module.
- [List Modules](https://docs.envzero.com/api-reference/modules/list-modules.md): Returns all modules associated with an organization.
- [Trigger Module Test Run](https://docs.envzero.com/api-reference/modules/trigger-module-test-run.md)
- [Update module](https://docs.envzero.com/api-reference/modules/update-module.md)
- [Create Notification Endpoint](https://docs.envzero.com/api-reference/notifications/create-notification-endpoint.md)
- [Delete Notification Endpoint](https://docs.envzero.com/api-reference/notifications/delete-notification-endpoint.md)
- [Get Notification Endpoint settings](https://docs.envzero.com/api-reference/notifications/get-notification-endpoint-settings.md)
- [List Notification Endpoints](https://docs.envzero.com/api-reference/notifications/list-notification-endpoints.md)
- [Test webhook notification target](https://docs.envzero.com/api-reference/notifications/test-webhook-notification-target.md)
- [Update Notification Endpoint](https://docs.envzero.com/api-reference/notifications/update-notification-endpoint.md)
- [Update Notification Settings](https://docs.envzero.com/api-reference/notifications/update-notification-settings.md)
- [Create a new Organization](https://docs.envzero.com/api-reference/organization/create-a-new-organization.md)
- [Create SSO Edit Ticket](https://docs.envzero.com/api-reference/organization/create-sso-edit-ticket.md)
- [Create SSO Ticket](https://docs.envzero.com/api-reference/organization/create-sso-ticket.md)
- [Get Organization](https://docs.envzero.com/api-reference/organization/get-organization.md)
- [Get Organization Limits](https://docs.envzero.com/api-reference/organization/get-organization-limits.md)
- [Get SSO Configuration](https://docs.envzero.com/api-reference/organization/get-sso-configuration.md)
- [Invite User](https://docs.envzero.com/api-reference/organization/invite-user.md)
- [List Organizations](https://docs.envzero.com/api-reference/organization/list-organizations.md)
- [List Users](https://docs.envzero.com/api-reference/organization/list-users.md)
- [Remove User](https://docs.envzero.com/api-reference/organization/remove-user.md)
- [Update Organization](https://docs.envzero.com/api-reference/organization/update-organization.md)
- [Update Policy](https://docs.envzero.com/api-reference/organization/update-policy.md)
- [Update User's Organization Role Assignment](https://docs.envzero.com/api-reference/organization/update-users-organization-role-assignment.md)
- [Archive a Project](https://docs.envzero.com/api-reference/projects/archive-a-project.md): This can not be undone. Running Environments will NOT be destroyed and continuous and scheduled Deployments will NOT continue to occur.
- [Create a new Project](https://docs.envzero.com/api-reference/projects/create-a-new-project.md)
- [Get a Project By ID](https://docs.envzero.com/api-reference/projects/get-a-project-by-id.md)
- [Get Modules Testing Project for Organization](https://docs.envzero.com/api-reference/projects/get-modules-testing-project-for-organization.md)
- [Get Policy](https://docs.envzero.com/api-reference/projects/get-policy.md)
- [Get Users With Access to Project](https://docs.envzero.com/api-reference/projects/get-users-with-access-to-project.md): Returns all users who have access to a project, including organization admins, users with direct project assignments, and users who have access through team assignments. Currently supports organizations with up to approximately 1000 users due to our limits.
- [List Projects](https://docs.envzero.com/api-reference/projects/list-projects.md)
- [Move a project to be a sub-project of another project](https://docs.envzero.com/api-reference/projects/move-a-project-to-be-a-sub-project-of-another-project.md)
- [Update a Project](https://docs.envzero.com/api-reference/projects/update-a-project.md)
- [Update Policy](https://docs.envzero.com/api-reference/projects/update-policy.md)
- [Create a new GPG key](https://docs.envzero.com/api-reference/provider-registry/create-a-new-gpg-key.md)
- [Create a new provider](https://docs.envzero.com/api-reference/provider-registry/create-a-new-provider.md)
- [Create a new provider version](https://docs.envzero.com/api-reference/provider-registry/create-a-new-provider-version.md)
- [Delete a GPG key](https://docs.envzero.com/api-reference/provider-registry/delete-a-gpg-key.md)
- [Delete a provider](https://docs.envzero.com/api-reference/provider-registry/delete-a-provider.md)
- [Find a provider by id](https://docs.envzero.com/api-reference/provider-registry/find-a-provider-by-id.md)
- [Find a provider by type](https://docs.envzero.com/api-reference/provider-registry/find-a-provider-by-type.md)
- [Find all providers in an organization](https://docs.envzero.com/api-reference/provider-registry/find-all-providers-in-an-organization.md)
- [Get a download url for a specific version](https://docs.envzero.com/api-reference/provider-registry/get-a-download-url-for-a-specific-version.md)
- [List all available GPG keys](https://docs.envzero.com/api-reference/provider-registry/list-all-available-gpg-keys.md)
- [Update a provider](https://docs.envzero.com/api-reference/provider-registry/update-a-provider.md)
- [Create remote state access configuration](https://docs.envzero.com/api-reference/remote-backend/create-remote-state-access-configuration.md): Creates configuration describing which environments, or projects in the organization may access a given environment's state
- [Delete remote state access configuration](https://docs.envzero.com/api-reference/remote-backend/delete-remote-state-access-configuration.md): Deletes an existing environment state access configuration
- [Get remote state access configuration](https://docs.envzero.com/api-reference/remote-backend/get-remote-state-access-configuration.md): Describe which environments, or projects in the organization may access a given environment's state
- [Assign a role to a user in a project](https://docs.envzero.com/api-reference/role-based-access/assign-a-role-to-a-user-in-a-project.md)
- [Get the user's role assignments in a project](https://docs.envzero.com/api-reference/role-based-access/get-the-users-role-assignments-in-a-project.md)
- [Remove user's role assignment on project](https://docs.envzero.com/api-reference/role-based-access/remove-users-role-assignment-on-project.md)
- [Update user's role assignment on project](https://docs.envzero.com/api-reference/role-based-access/update-users-role-assignment-on-project.md)
- [Create a Role](https://docs.envzero.com/api-reference/roles/create-a-role.md)
- [Create or Update a Role Assignment for a Team](https://docs.envzero.com/api-reference/roles/create-or-update-a-role-assignment-for-a-team.md): Currently supports organization or environment scope assignments only. Specifying `environmentId` or `organizationId` is required.
- [Create or Update a Role Assignment for a User](https://docs.envzero.com/api-reference/roles/create-or-update-a-role-assignment-for-a-user.md): Currently supports environment scope assignments only.
- [Delete a Role](https://docs.envzero.com/api-reference/roles/delete-a-role.md)
- [Get a Role](https://docs.envzero.com/api-reference/roles/get-a-role.md)
- [Get All Roles](https://docs.envzero.com/api-reference/roles/get-all-roles.md)
- [Get Team Role Assignments](https://docs.envzero.com/api-reference/roles/get-team-role-assignments.md): Specifying `environmentId`, `projectId` or `organizationId` is required.
- [Get User Role Assignments](https://docs.envzero.com/api-reference/roles/get-user-role-assignments.md): Currently supports environment scope assignments only.
- [Remove a Role Assignment for a Team](https://docs.envzero.com/api-reference/roles/remove-a-role-assignment-for-a-team.md): Specifying `environmentId`, `projectId` or `organizationId` is required.
- [Remove a Role Assignment for a User](https://docs.envzero.com/api-reference/roles/remove-a-role-assignment-for-a-user.md): Currently supports environment scope assignments only.
- [Update a Role](https://docs.envzero.com/api-reference/roles/update-a-role.md)
- [Get Drift Detection Environment Scheduling](https://docs.envzero.com/api-reference/scheduling/get-drift-detection-environment-scheduling.md)
- [Get Environment Scheduling](https://docs.envzero.com/api-reference/scheduling/get-environment-scheduling.md)
- [Get Project Scheduling](https://docs.envzero.com/api-reference/scheduling/get-project-scheduling.md)
- [Set Drift Detection Environment Scheduling](https://docs.envzero.com/api-reference/scheduling/set-drift-detection-environment-scheduling.md)
- [Set Environment Scheduling](https://docs.envzero.com/api-reference/scheduling/set-environment-scheduling.md)
- [Create or Update a single Team to Project Assignment](https://docs.envzero.com/api-reference/teams/create-or-update-a-single-team-to-project-assignment.md): This API is deprecated. Please use "Create or Update a Role Assignment for a Team" instead.
- [Create Team](https://docs.envzero.com/api-reference/teams/create-team.md)
- [Delete a single Team to Project Assignment](https://docs.envzero.com/api-reference/teams/delete-a-single-team-to-project-assignment.md): This API is deprecated. Please use "Remove a Role Assignment for a Team" instead.
- [Delete Team](https://docs.envzero.com/api-reference/teams/delete-team.md)
- [Get Team](https://docs.envzero.com/api-reference/teams/get-team.md)
- [List Project Teams Permissions](https://docs.envzero.com/api-reference/teams/list-project-teams-permissions.md): This API is deprecated. Please use "Get Team Role Assignments" instead.
- [List Teams](https://docs.envzero.com/api-reference/teams/list-teams.md)
- [Update Team](https://docs.envzero.com/api-reference/teams/update-team.md)
- [Update Teams Assignments](https://docs.envzero.com/api-reference/teams/update-teams-assignments.md): This API is deprecated. Please use "Create or Update a Role Assignment for a Team" instead.
- [Add Template to Project](https://docs.envzero.com/api-reference/templates/add-template-to-project.md)
- [Create Template](https://docs.envzero.com/api-reference/templates/create-template.md): Please note, you can only have 1 ssh key per template
- [Delete Environment Discovery Configuration for a Project](https://docs.envzero.com/api-reference/templates/delete-environment-discovery-configuration-for-a-project.md)
- [Delete Template](https://docs.envzero.com/api-reference/templates/delete-template.md)
- [Download TF module](https://docs.envzero.com/api-reference/templates/download-tf-module.md): Gets the URL of the source code for a Tofu/Terraform module. This is an API used by Tofu/Terraform to download the module when running `tofu init`. The URL could be found in the response header under X-Terraform-Get, and its format is "git::REPOSITORY_URL[//PATH_TO_FOLDER][?ref=GIT_REF]"
- [Enable/Update Environment Discovery Configuration](https://docs.envzero.com/api-reference/templates/enableupdate-environment-discovery-configuration.md)
- [Generate Terraform Variables from Repository](https://docs.envzero.com/api-reference/templates/generate-terraform-variables-from-repository.md): Clones and searches through a Template git repository for any Terraform variable blocks and returns a set of env0 Terraform Configuration Variables that may be added to env0 via the Configuration API
- [Get Assignable Templates](https://docs.envzero.com/api-reference/templates/get-assignable-templates.md): Returns a list of templates that can be assigned to the specified project, including those from parent projects and the organization.
- [Get Environment Discovery Configuration for a Project](https://docs.envzero.com/api-reference/templates/get-environment-discovery-configuration-for-a-project.md)
- [Get Template by ID](https://docs.envzero.com/api-reference/templates/get-template-by-id.md)
- [Get Workflow File](https://docs.envzero.com/api-reference/templates/get-workflow-file.md): Retrieve workflow file representation by blueprintId or VCS parameters (repositoryUrl, organizationId, path, etc.)
- [List git repository revisions](https://docs.envzero.com/api-reference/templates/list-git-repository-revisions.md)
- [List Templates](https://docs.envzero.com/api-reference/templates/list-templates.md): Returns all Templates associated with either an Organization or Project. At least one of these must be set.
- [Remove Template from Project](https://docs.envzero.com/api-reference/templates/remove-template-from-project.md)
- [Update Template](https://docs.envzero.com/api-reference/templates/update-template.md): Please note, you can only have 1 ssh key per template
- [Create SCIM Configuration](https://docs.envzero.com/api-reference/users/create-scim-configuration.md): Creates a SCIM configuration for the organization and generates a bearer token. The token is only returned once.
- [Create VCS Provider User Mapping](https://docs.envzero.com/api-reference/users/create-vcs-provider-user-mapping.md)
- [Delete SCIM Configuration](https://docs.envzero.com/api-reference/users/delete-scim-configuration.md): Deletes the SCIM configuration for the organization.
- [Get SCIM Configuration](https://docs.envzero.com/api-reference/users/get-scim-configuration.md): Returns the SCIM configuration for the organization (without the bearer token).
- [List User's VCS ID Mappings](https://docs.envzero.com/api-reference/users/list-users-vcs-id-mappings.md): Returns the user's account ids for all mapped vcs-es.
- [Update a User's VCS ID Mapping](https://docs.envzero.com/api-reference/users/update-a-users-vcs-id-mapping.md): Updates a user's VCS ID mapping, and returns the updated value.
- [Create VCS Connection](https://docs.envzero.com/api-reference/vcs/create-vcs-connection.md): Only supported creation of Self-Hosted VCS connections
- [Delete VCS Connection](https://docs.envzero.com/api-reference/vcs/delete-vcs-connection.md)
- [Get VCS Connection](https://docs.envzero.com/api-reference/vcs/get-vcs-connection.md)
- [Get VCS Repositories](https://docs.envzero.com/api-reference/vcs/get-vcs-repositories.md)
- [List VCS Connections](https://docs.envzero.com/api-reference/vcs/list-vcs-connections.md)
- [Update VCS Connection](https://docs.envzero.com/api-reference/vcs/update-vcs-connection.md)
- [Budget exceeded webhook](https://docs.envzero.com/api-reference/webhooks/budget-exceeded-webhook.md): This webhook is fired when a "Budget Exceeded" event has been triggered
- [Deploy failed webhook](https://docs.envzero.com/api-reference/webhooks/deploy-failed-webhook.md): This webhook is fired when a deploy has failed
- [Deploy succeeded webhook](https://docs.envzero.com/api-reference/webhooks/deploy-succeeded-webhook.md): This webhook is fired when a deploy has finished successfully
- [Deployment cancelled webhook](https://docs.envzero.com/api-reference/webhooks/deployment-cancelled-webhook.md): This webhook is fired when a deployment has been cancelled
- [Deployment resumed webhook](https://docs.envzero.com/api-reference/webhooks/deployment-resumed-webhook.md): This webhook is fired when a deployment has been resumed after an approval
- [Deployment started webhook](https://docs.envzero.com/api-reference/webhooks/deployment-started-webhook.md): This webhook is fired when a deployment has started
- [Deployment waiting for user webhook](https://docs.envzero.com/api-reference/webhooks/deployment-waiting-for-user-webhook.md): This webhook is fired when a deployment requires an approval
- [Destroy failed webhook](https://docs.envzero.com/api-reference/webhooks/destroy-failed-webhook.md): This webhook is fired when a destroy has failed
- [Destroy resumed webhook](https://docs.envzero.com/api-reference/webhooks/destroy-resumed-webhook.md): This webhook is fired when a destroy has been resumed after an approval
- [Destroy started webhook](https://docs.envzero.com/api-reference/webhooks/destroy-started-webhook.md): This webhook is fired when a destroy has started
- [Destroy succeeded webhook](https://docs.envzero.com/api-reference/webhooks/destroy-succeeded-webhook.md): This webhook is fired when a destroy has finished successfully
- [Drift detected webhook](https://docs.envzero.com/api-reference/webhooks/drift-detected-webhook.md): This webhook is fired when env0 detected a drift in an environment
- [Drift failed webhook](https://docs.envzero.com/api-reference/webhooks/drift-failed-webhook.md): This webhook is fired when an env0 drift detection failed to complete
- [Drift undetected webhook](https://docs.envzero.com/api-reference/webhooks/drift-undetected-webhook.md): This webhook is fired when a drift has been reconciled
- [Environment marked for auto destroy webhook](https://docs.envzero.com/api-reference/webhooks/environment-marked-for-auto-destroy-webhook.md): This webhook is fired when an environment is marked for auto destroy by a TTL Policy
- [Changelog](https://docs.envzero.com/changelogs.md): Stay up to date with the latest features, improvements, and fixes in env zero. Updates are organized by release month and year.
- [Non Admin API Keys](https://docs.envzero.com/changelogs/2022/05/non-admin-api-keys.md): Create user-scoped API keys with project-level RBAC in env zero, giving team members API access without granting full organization admin permissions.
- [Cost Monitoring for Terragrunt](https://docs.envzero.com/changelogs/2022/06/cost-monitoring-for-terragrunt.md): Track actual cloud costs for Terragrunt environments in env zero, correlating weekly spending with deployments using Terratag-powered cost monitoring.
- [env zero Workflows](https://docs.envzero.com/changelogs/2022/06/env0-workflows.md): Orchestrate multi-environment deployments with dependency ordering using env zero Workflows, defined in a YAML file and visualized as a deployment graph.
- [Managing Pulumi Version](https://docs.envzero.com/changelogs/2022/06/managing-pulumi-version.md): Pin Pulumi templates to a specific CLI version in env zero using the ENV0_PULUMI_VERSION variable or the template wizard, avoiding unexpected version upgrades.
- [TTL Policy Per Project](https://docs.envzero.com/changelogs/2022/06/ttl-policy-per-project.md): Override organization-level TTL policies at the project level in env zero, giving project admins control over environment time-to-live defaults and maximums.
- [CloudFormation Support](https://docs.envzero.com/changelogs/2022/07/cloudformation-support.md): Manage AWS CloudFormation stacks in env zero with continuous deployment, RBAC policies, custom flows, and workflow orchestration alongside other IaC tools.
- [Terragrunt run-all support](https://docs.envzero.com/changelogs/2022/07/terragrunt-run-all-support.md): Run multiple Terragrunt modules in one deployment with run-all in env zero, enabling CI/CD, drift detection, and cost estimation across all modules at once.
- [HashiCorp Vault Support For Self-Hosted Agent](https://docs.envzero.com/changelogs/2022/07/vault-hashicorp-vault-support.md): Resolve HashiCorp Vault secrets automatically on each deployment using the env zero self-hosted agent, keeping credentials within your private network.
- [Logs forwarding to Coralogix](https://docs.envzero.com/changelogs/2022/08/log-forwarding-to-coralogix.md): Forward IaC deployment logs from env zero to Coralogix for centralized monitoring, metrics, traces, and analytics alongside your other observability data.
- [OpenID Connect (OIDC) Support](https://docs.envzero.com/changelogs/2022/08/oidc-support.md): Authenticate to cloud providers using short-lived OIDC JWT tokens generated per deployment in env zero, removing the need to store long-lived credentials.
- [Removing Python 2, and other 3rd party updates.](https://docs.envzero.com/changelogs/2022/09/removing-python-2-and-other-3rd-party-updates.md): Breaking changes in the env zero deployment container: Python 2 removed, Alpine updated to 3.16, and Node, AWS CLI, and Azure CLI versions upgraded.
- [Business Tier now available in AWS Marketplace](https://docs.envzero.com/changelogs/2022/10/business-tier-now-available-in-aws-marketplace.md): Subscribe to env zero directly through AWS Marketplace, consolidating billing and procurement for all env zero subscription tiers within your AWS account.
- [Custom Roles](https://docs.envzero.com/changelogs/2022/10/custom-roles.md): Define custom RBAC roles in env zero with fine-grained permission sets, assignable to individual users or teams at the organization or project level.
- [env zero - The Game](https://docs.envzero.com/changelogs/2022/10/env0-game.md): An easter egg from env zero's hackathon: double-click an active deployment status to launch a browser game while you wait for the deployment to complete.
- [Mobile support](https://docs.envzero.com/changelogs/2022/10/env0-mobile-support.md): Manage env zero environments from mobile browsers at any resolution, with a streamlined view showing key environment status and cloud insights on the go.
- [OIDC Additional Claims](https://docs.envzero.com/changelogs/2022/10/oidc-additional-claims.md): env zero OIDC tokens now include projectId, templateId, environmentId, and deployerEmail claims for fine-grained authorization in AWS IAM and other systems.
- [Remote Backend](https://docs.envzero.com/changelogs/2022/10/remote-backend.md): Store Terraform state in env zero's Remote Backend with automatic configuration, state locking, version history, and support for authenticated local runs.
- [SAML Admin Group Integration](https://docs.envzero.com/changelogs/2022/10/saml-admin-group-integration.md): Map SAML IdP groups to org-admin roles in env zero using a naming convention, automatically granting admin permissions to all users within matching IdP groups.
- [Audit Log](https://docs.envzero.com/changelogs/2022/11/audit-log.md): Track organization activity in env zero audit logs, showing who performed each action, when it occurred, and detailed metadata, accessible via the UI or API.
- [Personal API Keys](https://docs.envzero.com/changelogs/2022/11/personal-api-keys.md): Generate personal API keys tied to your user account in env zero for the Terraform Provider, REST API, or Remote Backend, inheriting your RBAC permissions.
- [Project Costs](https://docs.envzero.com/changelogs/2022/11/project-costs.md): View aggregated cloud costs for entire projects in env zero, with cost graphs providing organization-level spending visibility beyond per-environment estimates.
- [Azure DevOps Integration](https://docs.envzero.com/changelogs/2022/12/azure-devops-integration.md): Connect Azure DevOps repositories to env zero to create templates, manage private modules, and enable continuous deployment from your Azure DevOps projects.
- [Log Forwarding to Google Cloud Logging](https://docs.envzero.com/changelogs/2022/12/log-forwarding-to-google-cloud-logging.md): Forward IaC deployment logs from env zero to Google Cloud Logging, centralizing infrastructure data alongside other GCP observability and monitoring sources.
- [Private Module Registry - Folder Based Modules](https://docs.envzero.com/changelogs/2022/12/module-registry-modules-from-path.md): Store multiple Terraform modules in a single repository using the env zero Private Module Registry's folder-based module support, reducing repository sprawl.
- [Plugins](https://docs.envzero.com/changelogs/2022/12/plugins.md): Add security scanners, policy enforcement, and notification integrations to IaC deployments using env zero Plugins defined in your env0.yaml configuration file.
- [Project Level Custom Flow](https://docs.envzero.com/changelogs/2022/12/project-level-custom-flow.md): Apply one shared custom flow YAML to all project environments in env zero, sourced from a separate repository to separate IaC code from deployment policies.
- [Deployment Comments](https://docs.envzero.com/changelogs/2023/01/deployment-comments.md): Add markdown comments to deployments, environment creation, destruction, and tasks in env zero to record context and improve team communication around changes.
- [Environment Locking](https://docs.envzero.com/changelogs/2023/01/environment-locking.md): Lock environments in env zero to block deployments and changes, with a visible banner showing which admin locked it, when, and the reason provided.
- [Remote Plans](https://docs.envzero.com/changelogs/2023/01/remote-plans.md): Run terraform plan locally with uncommitted code while executing inside env zero, enforcing your organization's governance policies and audit requirements.
- [Workflow Enhancement](https://docs.envzero.com/changelogs/2023/01/workflow-settings-enhancement.md): Configure per-environment variables, revisions, and workspace names when creating or deploying env zero Workflows, customizing each sub-environment separately.
- [Custom TTL Policy](https://docs.envzero.com/changelogs/2023/02/custom-ttl-policy.md): Set any TTL duration in months, weeks, days, or hours for env zero environments at the org or project level to prevent resources running indefinitely.
- [New Integrations - Plugins and Sumo Logic](https://docs.envzero.com/changelogs/2023/02/new-integrations-plugins-and-sumo-logic.md): New env zero plugins include TFLint, TFSec, Trivy, and Lightlytics, plus a new Sumo Logic log forwarding integration configurable from Organization Settings.
- [Sub Projects](https://docs.envzero.com/changelogs/2023/02/sub-projects.md): Nest projects within projects in env zero using Sub Projects, with RBAC permissions cascading from parent to all child sub-projects in the hierarchy.
- [PR Comments With Role Based Access](https://docs.envzero.com/changelogs/2023/03/pr-comments-plan-and-apply-role-based-access.md): Map VCS users to env zero custom roles so PR comment-triggered plan and apply enforce env zero RBAC, not just VCS repository commenter permissions.
- [Remote State Access Control](https://docs.envzero.com/changelogs/2023/03/remote-state-access-control.md): Restrict access to Terraform remote state in env zero by specifying which projects and sub-projects are authorized to read that environment's state data.
- [Private Plugins](https://docs.envzero.com/changelogs/2023/04/private-plugins.md): Store env zero plugins in private Git repositories to integrate internal tooling, reuse org-specific code in custom flows, and keep proprietary logic private.
- [Private Provider Registry](https://docs.envzero.com/changelogs/2023/04/private-provider-registry.md): Manage proprietary Terraform providers in env zero's Private Provider Registry, keeping custom provider binaries secure and accessible across your organization.
- [Bulk Operations](https://docs.envzero.com/changelogs/2023/05/bulk-operations.md): Deploy, destroy, lock, or run tasks on multiple env zero environments at once, selecting environments within a project or across projects from the dashboard.
- [Environment RBAC Granularity](https://docs.envzero.com/changelogs/2023/05/environment-role-based-access-granularity.md): Assign custom roles at the environment level in env zero, granting users or teams access to one environment without raising permissions across the project.
- [Moving Projects and Sub Projects](https://docs.envzero.com/changelogs/2023/05/moving-projects-and-sub-projects.md): Move projects and sub-projects to different parent projects in env zero to reorganize your hierarchy without losing associated environments or configurations.
- [Project-Level Remote Backend Enforcement](https://docs.envzero.com/changelogs/2023/05/project-level-remote-backend-enforcement.md): Enforce the env zero Remote Backend for all new Terraform environments in a project using the Force Remote Backend policy in project settings.
- [AWS Session Tags for OIDC](https://docs.envzero.com/changelogs/2023/06/aws-session-tags-for-oidc.md): env zero OIDC tokens now include AWS session tags via principal_tags claims, enabling IAM trust policies to enforce per-deployment access rules in AWS.
- [Helm Support](https://docs.envzero.com/changelogs/2023/06/helm-support.md): Deploy Helm charts as env zero environments with native approval flows, PR plan triggers, drift detection, TTL policies, and scheduling alongside IaC tools.
- [2 PR Plan and Remote Backend for Workflow](https://docs.envzero.com/changelogs/2023/06/pr-plan-and-remote-backend-for-workflow.md): Enable remote backend storage for all sub-environments in a workflow and trigger PR plan executions across deployed workflow environments from a pull request.
- [Approval Policies](https://docs.envzero.com/changelogs/2023/07/approval-policies.md): Apply OPA-based approval policies in env zero to cancel, pause for review, or approve deployments based on plan output, enforcing infrastructure guardrails.
- [env zero-Hosted Encrypted State](https://docs.envzero.com/changelogs/2023/07/env0-hosted-encrypted-state.md): Use env zero-hosted encrypted state as a PVC alternative for self-hosted agents, encrypting the working directory with a customer-provided key in env zero.
- [Plan and Apply from PR comments support for Azure DevOps](https://docs.envzero.com/changelogs/2023/07/plan-and-apply-from-pr-comments-support-for-azure-devops.md): Trigger env zero plan and apply operations for Azure DevOps pull requests using PR comments, without logging into the env zero platform directly.
- [Self Hosted Agents Monitoring](https://docs.envzero.com/changelogs/2023/07/self-hosted-agents-monitoring.md): View the current state of all self-hosted agents from the Organization Settings Agents page in env zero, with a full overview of each agent's status.
- [Update Environment Variables without Deploying](https://docs.envzero.com/changelogs/2023/07/update-environment-variables-without-deploying.md): Save changes to environment variables in env zero without triggering a deployment, so updates are staged and applied on the next redeploy.
- [Native Kubernetes Authentication](https://docs.envzero.com/changelogs/2023/08/better-kubernetes-support.md): Set up Kubernetes authentication natively in env zero using kubeconfig, AWS EKS, Azure AKS, or GCP GKE credentials with per-project cluster access control.
- [Docker Deployment Agent](https://docs.envzero.com/changelogs/2023/08/docker-deployment-agent.md): Run env zero self-hosted agents as Docker containers by pulling the Docker image and starting it, without needing a Kubernetes cluster or persistent storage.
- [Organization Costs](https://docs.envzero.com/changelogs/2023/08/organization-costs.md): View cloud costs across all projects from the Organization Dashboard Cost tab in env zero, giving a complete picture of multi-project spending over time.
- [Budget Notifications](https://docs.envzero.com/changelogs/2023/09/budget-notifications.md): Set project-level spending budgets in env zero and receive alerts when cloud costs cross weekly, monthly, or yearly thresholds via notification channels.
- [VS-Code Extension](https://docs.envzero.com/changelogs/2023/09/vs-code-extension.md): Deploy and monitor env zero environments from VS Code, viewing environments by git branch, triggering deployments, approving changes, and tailing live logs.
- [Immediate Persistence of Variables Regardless of Deployment Outcome](https://docs.envzero.com/changelogs/2023/10/immediate-persistence-of-variables-regardless-of-deployment-outcome.md): env zero now saves environment variables at deployment time rather than only on success, so variable changes are retained even when a deployment fails.
- [Official OpenTofu Support](https://docs.envzero.com/changelogs/2023/10/official-opentofu-support.md): OpenTofu, the Linux Foundation-managed Terraform fork, is now a natively supported IaC framework in env zero and is backward compatible with Terraform.
- [Breaking Change to Parent and Sub Projects Variables Behaviour](https://docs.envzero.com/changelogs/2023/11/change-to-project-variables-behaviour.md): Breaking change in env zero: project variables cascade to sub-projects, enabling unified management and consistent configuration across the project hierarchy.
- [Easy OIDC Authentication Integration](https://docs.envzero.com/changelogs/2023/11/easy-oidc-authentication-integration.md): Configure OIDC credentials in env zero without storing sensitive data, then assign them to projects to generate short-lived tokens automatically per deployment.
- [BREAKING CHANGE - incoming traffic from env0 extended IP list](https://docs.envzero.com/changelogs/2023/11/improved-resiliency.md): env zero expanded its infrastructure across additional AWS regions and AZs. Update your IP allowlists to include the new addresses by December 4, 2023.
- [Self Hosted Remote State](https://docs.envzero.com/changelogs/2023/11/self-hosted-remote-state.md): Store Terraform remote state in your own cloud bucket using env zero's self-hosted remote state, keeping state data within your account and chosen region.
- [Usage Dashboard](https://docs.envzero.com/changelogs/2023/11/usage-dashboard.md): Track users, monthly deployments, and deployment limits in the env zero Usage Dashboard, available under Organization Settings > Billing.
- [Remote Apply](https://docs.envzero.com/changelogs/2023/12/remote-apply.md): Run terraform apply locally with uncommitted code while execution happens inside env zero, keeping organization policies, governance, and audit logging active.
- [New: Modules Continuous Integration Testing](https://docs.envzero.com/changelogs/2024/01/new-modules-continuous-integration-testing.md): Run automated tests against Terraform modules in the env zero Private Module Registry using OpenTofu test files, triggered on merges and pull requests.
- [Introducing: Targeted Deployments](https://docs.envzero.com/changelogs/2024/01/targeted-deployments.md): Deploy specific Terraform resources or modules in env zero using Targeted Deployments, scoping a run to only the resources that need updating via UI or API.
- [Partial Workflow Deployment](https://docs.envzero.com/changelogs/2024/01/workflow-sub-graph-deployment.md): Run or destroy a subset of a workflow in env zero with Partial Workflow Deployment, choosing to start from a specific node or redeploy a single sub-environment.
- [Email Notifications](https://docs.envzero.com/changelogs/2024/02/email-notifications.md): Configure custom email recipients and event triggers per project in env zero, sending notifications for failed deployments, budget alerts, and completions.
- [Environment Discovery](https://docs.envzero.com/changelogs/2024/02/environment-discovery.md): Automatically create, plan, deploy and destroy Environments in env zero by creating pull requests within a preconfigured directory structure
- [BREAKING CHANGE - Separate environment "Drift Status" from the Deployment status](https://docs.envzero.com/changelogs/2024/02/separate-environment-drift-status-from-the-general-status.md): Breaking change: drift status moves to a separate driftStats field in env zero. The DRIFTED deployment status is deprecated starting February 29, 2024.
- [Create Environment Without Deploy](https://docs.envzero.com/changelogs/2024/03/create-environment-without-deploy.md): Use the preventAutoDeploy flag in env zero's Create Environment API or Terraform Provider to create environments without triggering an immediate deployment run.
- [Organization Role Assignments for Teams](https://docs.envzero.com/changelogs/2024/03/organization-role-assignments-for-teams.md): Assign custom roles to teams at the organization level in env zero, adding org-wide access control alongside existing project and environment-level assignments.
- [VCS environments in workflows](https://docs.envzero.com/changelogs/2024/03/vcs-environments-in-workflows.md): Define workflow sub-environments inline using the vcs field in workflow YAML, specifying repository, path, and IaC type without pre-creating env zero templates.
- [Approval Policies and Custom Flows Enhancements](https://docs.envzero.com/changelogs/2024/04/approval-policies-and-custom-flows-enhancements.md): Assign multiple approval policies and custom flows per env zero project, with template-level enforcement and combined project and environment-level execution.
- [Environment Outputs](https://docs.envzero.com/changelogs/2024/04/environment-outputs.md): Export Terraform, OpenTofu, or Terragrunt outputs and pass them as inputs to other environments in the same env zero project, linking data across deployments.
- [Global Environment Search](https://docs.envzero.com/changelogs/2024/04/global-environment-search.md): Search all environments across your organization in env zero using the top navigation search icon or CMD+K, with results scoped to your accessible environments.
- [Navigation Improvement](https://docs.envzero.com/changelogs/2024/04/navigation-improvement.md): Refreshed env zero navigation bar with a modern design, separated org and project settings, a nested sub-project tree, and enhanced cross-project search.
- [Docker image Alpine and Node upgrade](https://docs.envzero.com/changelogs/2024/05/docker-image-alpine-and-node-upgrade.md): env zero deployment container updated: Alpine upgraded to 3.19, Node to 20.12.2, and pip to 24.0, improving performance and security for tasks and custom flows.
- [Variable Sets](https://docs.envzero.com/changelogs/2024/05/variable-sets.md): Create reusable Variable Sets in env zero and assign them to organizations, projects, templates, or environments to eliminate duplicated variable configuration.
- [Variables Improvements](https://docs.envzero.com/changelogs/2024/05/variables-improvements.md): Scope-based filtering, priority sorting for required variables, and collapsible grouping for sensitive variables in the env zero Variables Table.
- [Webhook Notification Target](https://docs.envzero.com/changelogs/2024/05/webhook-notifications.md): Set up webhook notification targets in env zero to send HTTP callbacks on deployment events, enabling automated responses in external systems and CI pipelines.
- [Approval Flow for Workflows](https://docs.envzero.com/changelogs/2024/06/approval-flow-for-workflows.md): Gate workflow progression in env zero by requiring approval on sub-environments via the requiresApproval YAML field, UI checkboxes, or OPA approval policies.
- [Cloud Compass](https://docs.envzero.com/changelogs/2024/07/cloud-compass.md): Cloud Compass in env zero visualizes IaC coverage trends, resource management distribution, and per-resource severity scores to identify unmanaged resources.
- [GitOps Apply All](https://docs.envzero.com/changelogs/2024/07/gitops-apply-all.md): Apply all environments affected by a pull request in env zero using env0 apply --all, with individual and aggregate commit status checks reported to your VCS.
- [Move Environments between Projects](https://docs.envzero.com/changelogs/2024/07/move-environments-between-projects.md): Move environments between projects in env zero from the environment menu, then redeploy to apply the target project's credentials and variable configuration.
- [Ansible Support](https://docs.envzero.com/changelogs/2024/08/ansible-support.md): Run Ansible playbooks as env zero environments with native approval flows, PR plan triggers, drift detection, TTL policies, and scheduling alongside IaC tools.
- [Introducing Hybrid Agents and Secured Variables for Self-Hosted Agents](https://docs.envzero.com/changelogs/2024/09/mix-agents-and-variables.md): Mix SaaS and self-hosted agents within the same env zero organization, and share encrypted SaaS-stored variables securely with self-hosted agent deployments.
- [Streamline Onboarding With Automated Environment Import](https://docs.envzero.com/changelogs/2024/09/onboarding-import-external-environments.md): Import Terraform workspaces into env zero in bulk via Environment Discovery, scanning Git repositories and placing environments into projects automatically.
- [Cloud Compass Adds Support for Microsoft Azure](https://docs.envzero.com/changelogs/2024/11/cloud-compass-supports-for-microsoft-azure.md): Cloud Compass now supports Microsoft Azure for IaC coverage tracking, risk assessment, and GenAI-assisted resource import alongside AWS support in env zero.
- [Custom Flows For Tasks](https://docs.envzero.com/changelogs/2024/11/custom-flows-for-tasks.md): With this update, you can now configure custom hooks for your tasks, allowing you to define specific setups and teardowns for all ad-hoc tasks.
- [Introducing Drift Cause: Adding Context to Drift Management](https://docs.envzero.com/changelogs/2024/12/introducing-drift-cause-adding-context-to-drift-management.md): Drift Cause in env zero identifies who caused drift, how it was triggered, and when it occurred by correlating IaC state with out-of-band cloud audit logs.
- [Polish & Improvements - December 2024](https://docs.envzero.com/changelogs/2024/12/polish-improvements-december-2024.md): December 2024: multiple VCS agents, GitLab access token auth, Terragrunt cost estimation, Vault certificate auth, and deployment filtering by user and status.
- [New Backstage Plugin: Manage and Deploy IaC from Your Internal Developer Portal](https://docs.envzero.com/changelogs/2025/01/backstage-integration.md): Use the env zero Backstage Plugin to create, deploy, and monitor cloud environments from Backstage, with deployment history, live logs, and redeploy support.
- [New: Spot Drift in Minutes With Cloud Compass - Even Before Fully Onboarding](https://docs.envzero.com/changelogs/2025/02/cloud-compass-drilldown.md): Cloud Compass detects drift and drift risk for all cloud resources, including unmanaged ones, with event-level details on what changed, who made it, and when.
- [Drift Remediation Keep Your Infrastructure Aligned with Your Code](https://docs.envzero.com/changelogs/2025/02/drift-remediation.md): Reconcile infrastructure drift in env zero automatically or manually, reapplying IaC at the project or environment level while respecting all approval policies.
- [Introducing env zero Cloud Analyst: AI-Powered Infrastructure Intelligence](https://docs.envzero.com/changelogs/2025/03/introducing-env0-cloud-analyst-for-ai-powered-infrastructure-intelligence.md): Cloud Analyst in env zero answers plain-language questions about deployments, drift, and IaC usage, returning structured data and supporting custom dashboards.
- [Polish & Improvements: January-February 2025](https://docs.envzero.com/changelogs/2025/03/polish-improvements-january-2025.md): Jan-Feb 2025: dark mode, redesigned homepage, Oracle Cloud credentials, Cloud Compass all-accounts view, multi-org GitHub Enterprise, Dynatrace log forwarding.
- [Drift Cause Analysis: Understand Why Drift Happened](https://docs.envzero.com/changelogs/2025/04/drift-cause-analysis-understand-why-drift-happened.md): Drift Cause Analysis uses AI in env zero to explain why resources drifted, tracing manual changes, unapplied commits, variable updates, and version mismatches.
- [Whats New: AI-Powered Summarization and Error Insights (Beta)](https://docs.envzero.com/changelogs/2025/04/whats-new-ai-powered-summarization-and-error-insights-beta.md): Use AI in env zero to get plain-language error explanations and plan summaries during deployments, with sensitive data redacted and no model training on data.
- [New in Drift Remediation: Automated Code Updates to Keep IaC in Sync](https://docs.envzero.com/changelogs/2025/05/new-in-drift-remediation-automated-code-updates-to-keep-iac-in-sync.md): env zero can generate a pull request to update IaC to match detected cloud changes, adding code-to-cloud alongside the existing cloud-to-code remediation.
- [Cloud Compass Adds Support for GCP](https://docs.envzero.com/changelogs/2025/06/cloud-compass-adds-support-for-gcp.md): Cloud Compass now supports GCP, completing multi-cloud coverage across AWS, Azure, and Google Cloud for IaC gap analysis, risk assessment, and resource import.
- [Polish & Improvements: June 2025](https://docs.envzero.com/changelogs/2025/06/polish-improvements-june-2025.md): June 2025: workflow output variables, audit log forwarding, self-hosted agent plugin caching, project-level credentials, dry run support, and VCS user mappings.
- [env zero MCP Server: Fast and Safe Infrastructure Actions from IDEs and Agents](https://docs.envzero.com/changelogs/2025/09/env-zero-mcp-server-change-log.md): Use the env zero MCP Server to plan, approve, and deploy infrastructure from your IDE or AI agent, with all env zero governance policies enforced on every run.
- [Introducing Ready-To-Use Policies](https://docs.envzero.com/changelogs/2025/09/ready-to-use-policies-change-log.md): Apply pre-built security, compliance, and cost policies in env zero at the organization, project, or environment level from a catalog without writing any code.
- [Now Available (Beta): Code Optimizer Helps You Improve Infrastructure Code Quality and Safety](https://docs.envzero.com/changelogs/2025/11/code-optimizer-beta.md): Code Optimizer scans IaC in env zero using Checkov and TFLint, flags issues with environment context, and generates pull requests with suggested fixes.
- [Projects Page Refresh: Clearer Overview, Tags, and Improved UI](https://docs.envzero.com/changelogs/2026/01/projects-page-refresh.md): The refreshed Projects page in env zero shows richer metadata, environment status, sub-project hierarchy, and tag-based filtering to manage projects at scale.
- [Self-Service SSO: Speed Up Authentication and Stay in Control](https://docs.envzero.com/changelogs/2026/01/self-service-sso.md): Configure Azure AD or SAML 2.0 SSO in env zero from Organization Settings, manage domain mappings and role assignments on your schedule without support tickets.
- [SCIM Provisioning: Automate User Lifecycle Management](https://docs.envzero.com/changelogs/2026/02/scim-provisioning.md): Use SCIM 2.0 with Okta or Microsoft Entra ID to auto-provision and deprovision env zero users, keeping access in sync with your identity provider continuously.
- [Self-Service Agent: Create and Manage Agent Pools Without Contacting Support](https://docs.envzero.com/changelogs/2026/03/self-service-agent.md): Manage self-hosted agent pools in env zero from Organization Settings, generate authentication secrets, and assign agent pools to projects on your own schedule.
- [Simplify Terraform Cloud Migration With the env zero Migration Wizard](https://docs.envzero.com/changelogs/2026/03/tfc-migration-wizard.md): Migrate TFC or TFE workspaces to env zero using a guided wizard that discovers workspaces, transfers variables and state, and handles a controlled cutover.
- [Additional Deployment Controls](https://docs.envzero.com/guides/admin-guide/additional-controls.md): Configure advanced deployment controls via environment variables at organization, project, template, or environment scope for Terraform and IaC tools.
- [View Audit Logs](https://docs.envzero.com/guides/admin-guide/audit-logs.md): Track user activity with audit logs in env zero, covering environments, templates, teams, users, roles, and cloud credentials. Enterprise plan only.
- [Custom Flows Overview](https://docs.envzero.com/guides/admin-guide/custom-flows.md): Run custom commands during deployment with env0.yml custom flows, supporting bash, Python, and Ansible hooks before or after Terraform init and apply.
- [Project-Level Custom Flow](https://docs.envzero.com/guides/admin-guide/custom-flows/project-level-custom-flow.md): Configure custom flows at the project level to apply across all environments, with override or merge policies for template-level env0.yml files.
- [Custom Flow Schema (v2)](https://docs.envzero.com/guides/admin-guide/custom-flows/version-2-schema.md): Reference for the version 2 env0.yml custom flow schema, where each configured step appears as a separate deployment step in the env zero UI with its own logs.
- [Monitoring Dashboards](https://docs.envzero.com/guides/admin-guide/dashboards.md): Monitor organization activity with summary and activity dashboards showing environment status, deployment counts, top deploying users, and trends.
- [Managing Environments](https://docs.envzero.com/guides/admin-guide/env-zero-environments.md): Create, manage, and automate IaC deployments as environments in env zero for Terraform, CloudFormation, Pulumi, Helm, and Kubernetes namespaces.
- [Creating & Managing Projects](https://docs.envzero.com/guides/admin-guide/env-zero-projects.md): Organize environments and resources with projects and sub-projects in env zero for access control, multi-cloud account management, and policy inheritance.
- [Using env zero Templates](https://docs.envzero.com/guides/admin-guide/env-zero-templates.md): Define reusable infrastructure blueprints with templates in env zero, supporting Terraform, OpenTofu, Terragrunt, Pulumi, CloudFormation, and Helm.
- [Environment Discovery Overview](https://docs.envzero.com/guides/admin-guide/environment-discovery.md): Automatically discover, import, and manage infrastructure environments in env zero for file-based creation, PR provisioning, and bulk onboarding of IaC.
- [Auto-Create Environments from Pull Requests](https://docs.envzero.com/guides/admin-guide/environment-discovery/automatic-environment-creation-from-pull-request.md): Automatically create and destroy environments from pull requests using glob pattern directory mapping and per-project discovery settings in env zero.
- [Discovery by File](https://docs.envzero.com/guides/admin-guide/environment-discovery/discovery-by-file.md): Use env0-discovery.yml marker files to create environments from existing templates, avoiding circular dependencies with the env zero Terraform Provider.
- [Import External Environments into env zero](https://docs.envzero.com/guides/admin-guide/environment-discovery/onboarding-import-external-environments-into-env-zero.md): Import and bulk-migrate Terraform or Terragrunt environments into env zero using environment discovery, with pre-filled variable keys and batch import.
- [Environment Overview](https://docs.envzero.com/guides/admin-guide/environments.md): Manage IaC deployment environments in env zero - create, destroy, and redeploy across Terraform, Terragrunt, CloudFormation, Pulumi, and Helm.
- [Environment Access](https://docs.envzero.com/guides/admin-guide/environments/access.md): Control RBAC permissions at the environment level in env zero to grant users or teams access to specific environments using custom roles.
- [Running Ad Hoc Tasks](https://docs.envzero.com/guides/admin-guide/environments/ad-hoc-tasks.md): Run arbitrary bash commands on your env zero deployment container without committing to git using ad hoc tasks, with access to all environment variables.
- [Ai Powered Summaries & Error Insights](https://docs.envzero.com/guides/admin-guide/environments/ai-powered-summarization-and-error-insights.md): Use AI error insights and plan/apply summarization in env zero to analyze deployment errors and highlight infrastructure changes for Terraform runs.
- [Managing Bulk Operations](https://docs.envzero.com/guides/admin-guide/environments/bulk-operations.md): Run deploy, destroy, or other operations on multiple env zero environments simultaneously from the project environments page or organization dashboard.
- [Using Continuous Deployment](https://docs.envzero.com/guides/admin-guide/environments/continuous-deployment.md): Configure env zero environments to automatically redeploy on every push to a git branch, with options for any change or file filter pattern triggers.
- [Detect Drift](https://docs.envzero.com/guides/admin-guide/environments/drift-detection.md): Set up automated drift detection in env zero to identify when cloud resources diverge from IaC definitions, with cron scheduling and notification options.
- [Remediate Drift](https://docs.envzero.com/guides/admin-guide/environments/drift-detection/automatic-drift-remediation.md): Automatically or manually remediate infrastructure drift in env zero by deploying code from VCS or creating pull requests for manual cloud changes.
- [Analyze Drift Cause](https://docs.envzero.com/guides/admin-guide/environments/drift-detection/drift-cause.md): Identify the root cause of infrastructure drift in env zero, covering manual changes, provider version updates, and unapplied code for Terraform.
- [Locking Environments](https://docs.envzero.com/guides/admin-guide/environments/environment-locking.md): Lock env zero environments to prevent deploy, destroy, plan, and drift detection from running, with an optional lock reason visible to project members.
- [Moving Environments](https://docs.envzero.com/guides/admin-guide/environments/move-environment.md): Move env zero environments between projects to reorganize structures, with automatic updates to variables, policies, and state access control settings.
- [Plan And Apply via PR Comments](https://docs.envzero.com/guides/admin-guide/environments/plan-and-apply-from-pr-comments.md): Trigger env zero plan and apply from pull request comments in GitHub, GitLab, Bitbucket, Azure DevOps, and self-hosted VCS providers.
- [Running Plan on Pull Requests](https://docs.envzero.com/guides/admin-guide/environments/plan-on-pull-request.md): Automatically run a Terraform plan on every pull request to review infrastructure changes before merging, with results posted as a PR comment.
- [Deployment Scheduling](https://docs.envzero.com/guides/admin-guide/environments/scheduling.md): Schedule automatic deploys and destroys for env zero environments using UNIX cron expressions, with options for recurring actions and TTL interaction.
- [Creating a New Environment](https://docs.envzero.com/guides/admin-guide/environments/setting-up-a-new-environment.md): Create a new env zero environment from a template with RBAC controls or direct VCS integration for Terraform, OpenTofu, Helm, and other IaC frameworks.
- [Performing Targeted Deployments](https://docs.envzero.com/guides/admin-guide/environments/targeted-deployments.md): Deploy specific Terraform resources or modules in env zero using targeted deployments via the UI, API, or ENV0_TERRAFORM_TARGET environment variable.
- [Configure Workflow Triggers](https://docs.envzero.com/guides/admin-guide/environments/workflow-triggers.md): Configure chained environment deployments in env zero using workflow triggers, defining dependent environments that deploy after an upstream success.
- [Product Homepage](https://docs.envzero.com/guides/admin-guide/homepage.md): Navigate the env zero homepage to review failed, drifted, or approval-pending environments and view Cloud Compass infrastructure coverage insights.
- [Git and VCS Integration](https://docs.envzero.com/guides/admin-guide/manage-vcs.md): Connect Git repositories and VCS to env zero - including GitHub, GitLab, Bitbucket, and Azure DevOps - for automated IaC deployments and GitOps workflows.
- [Manage Organizations](https://docs.envzero.com/guides/admin-guide/organizations.md): Set up and manage organizations as the top-level entity for projects, templates, variables, and policies in env zero, including SSO configuration.
- [Private Registry](https://docs.envzero.com/guides/admin-guide/private-registry.md): Host and manage private Terraform modules and providers in the env zero registry, with automated authorization during deployments and API key access.
- [Module Overview](https://docs.envzero.com/guides/admin-guide/private-registry/modules.md): Share Terraform and OpenTofu modules with the env zero private module registry, with VCS-backed publishing, version control, and organization-wide access.
- [Using Modules](https://docs.envzero.com/guides/admin-guide/private-registry/modules/module-usage.md): Track module adoption in the env zero private registry with download counters and environment dependency counts to monitor module usage across your org.
- [Testing Modules in CI](https://docs.envzero.com/guides/admin-guide/private-registry/modules/modules-continuous-integration-testing.md): Run automated CI tests on private registry modules in env zero using OpenTofu tftest files, with per-commit and per-PR test execution support.
- [Providers Overview](https://docs.envzero.com/guides/admin-guide/private-registry/providers.md): Publish and manage private Terraform providers in the env zero provider registry, with goreleaser version publishing and private registry authentication.
- [Manage Projects](https://docs.envzero.com/guides/admin-guide/projects.md): Organize environments with projects in env zero for access control, multi-cloud account management, and separation of dev, staging, and production.
- [Manage Sub-Projects](https://docs.envzero.com/guides/admin-guide/projects/sub-projects.md): Create and manage sub-projects to organize environments, templates, and variables hierarchically in env zero, with per-level RBAC role assignments.
- [Running Remote Apply](https://docs.envzero.com/guides/admin-guide/remote-backend/remote-apply.md): Run terraform apply locally while executing remotely on env zero with shared state, variables, cost estimation, and an auditable deployment record.
- [Running Remote Plan](https://docs.envzero.com/guides/admin-guide/remote-backend/remote-plan.md): Run terraform plan locally while executing remotely on env zero with shared state, RBAC, cost estimation, and custom flows, with auditable results.
- [Remote State Data Source](https://docs.envzero.com/guides/admin-guide/remote-backend/remote-state-data-source.md): Use the terraform_remote_state data source to read outputs from env zero remote backend state, sharing VPC IDs and endpoints across Terraform stacks.
- [Using Self-Hosted Remote State](https://docs.envzero.com/guides/admin-guide/remote-backend/self-hosted-remote-state.md): Store env zero remote backend state in your own AWS S3 bucket using the env zero Terraform module for data residency and compliance requirements.
- [Configuring State Access Control](https://docs.envzero.com/guides/admin-guide/remote-backend/state-access-control.md): Control which environments can access env zero remote state, restricting terraform_remote_state access to specific projects for secure state sharing.
- [Migrating State](https://docs.envzero.com/guides/admin-guide/remote-backend/state-migration.md): Migrate Terraform state to or from env zero remote backend using terraform init -migrate-state, including migrations from TFC, S3, and other backends.
- [Integrate With Terraform Cloud Remote Backend](https://docs.envzero.com/guides/admin-guide/remote-backend/working-with-terraform-cloud-remote-backend.md): Use env zero with Terraform Cloud remote backend for state storage during evaluation or migration, requiring local execution mode and an API token.
- [Authenticating the Agent On AWS EKS](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/authenticating-the-agent-on-aws-eks.md): Authenticate env zero self-hosted agents on AWS EKS using Pod Identity, IRSA, or Node Roles, with credential resolution order and service account setup.
- [Authenticating the Agent On Azure AKS](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/authenticating-the-agent-on-azure-aks.md): Authenticate env zero self-hosted agents on Azure AKS using workload identity and federated tokens, with azurerm provider and Helm configuration.
- [Autoscaling Self-Hosted Agents on Azure Container Apps](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/autoscaling-on-azure-container-apps.md): Run env zero self-hosted agents as ephemeral Azure Container Apps Jobs that scale to zero when idle and spin up on demand, using KEDA autoscaling.
- [Using Cache with PVC](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/cache-with-pvc.md): Enable plugin caching with Persistent Volume Claims on the env zero self-hosted Kubernetes agent to reduce provider download times for Terraform runs.
- [Using Custom CA Certificates](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/custom-ca-certificates.md): Add custom or self-signed CA certificates to your env zero self-hosted Kubernetes agent using Kubernetes secrets and the customCertificates Helm value.
- [Custom/Optional Configuration](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/custom-optional-configuration.md): Helm values reference for the env zero self-hosted Kubernetes agent, covering authentication, Docker image, resource limits, and pod scheduling options.
- [env zero Hosted Encrypted State](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/env-zero-hosted-encrypted-state.md): Use env zero hosted encrypted state to avoid PVC configuration for the self-hosted Kubernetes agent, with a customer-provided base64 encryption key.
- [Extending Deployment Image](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/extending-deployment-image.md): Extend the env zero deployment agent base image with custom tools and pre-installed CLIs using a Dockerfile for the self-hosted Kubernetes agent.
- [HA/DR Strategy for Self-Hosted Agents](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/hadr-strategy-for-self-hosted-agents.md): Configure high availability and disaster recovery for env zero self-hosted agents using active-passive Kubernetes clusters in separate availability zones.
- [Hosting Deployment Logs](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/hosting-the-deployment-logs.md): Store env zero deployment logs in your own AWS DynamoDB table using the env zero log table Terraform module with IAM role ARN configuration.
- [Running Multiple Self-Hosted Agents](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/multiple-self-hosted-agents.md): Run multiple self-hosted and SaaS agents in a single env zero organization with per-project assignment for isolation and security boundary separation.
- [Self-Hosted Agents Overview](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/overview.md): Create and manage self-hosted agent pools, authentication secrets, and project assignments in env zero for Kubernetes and Docker agents.
- [Monitoring Self-Hosted Agents](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/self-hosted-agents-monitoring.md): Monitor the health and version of env zero self-hosted Kubernetes agents, with active, inactive, and degraded status indicators for connectivity issues.
- [Self-Hosted Kubernetes Agent](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/self-hosted-kubernetes-agent.md): Install and configure the env zero self-hosted Kubernetes agent using Helm, covering autoscaler, persistent volume setup, and upgrade procedures.
- [Running a Standalone Docker Agent](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/standalone-docker-agent.md): Run the env zero self-hosted agent as a standalone Docker container using docker run with an agent access token and base64 state encryption key.
- [Troubleshooting](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/troubleshooting.md): Troubleshoot common env zero self-hosted Kubernetes agent issues, including SIGABRT crash errors from pod memory limits and resource configuration.
- [Changing User Id](https://docs.envzero.com/guides/admin-guide/self-hosted-kubernetes-agent/using-a-custom-image-in-an-agent/change-user-id.md): Change the default user ID and group ID in the env zero self-hosted agent Docker image using a custom Dockerfile and Helm strictSecurityContext settings.
- [Template Overview](https://docs.envzero.com/guides/admin-guide/templates.md): Learn how env zero templates define reusable environment configurations for IaC, supporting Terraform, OpenTofu, Terragrunt, Pulumi, and CloudFormation.
- [Ansible Integration](https://docs.envzero.com/guides/admin-guide/templates/ansible.md): Configure and deploy Ansible playbooks with env zero for automated configuration management, supporting standard Ansible versions with custom flows.
- [Azure DevOps Integration](https://docs.envzero.com/guides/admin-guide/templates/azure-devops-integration.md): Connect Azure DevOps repositories to env zero for IaC template creation, requiring Basic access level and View permissions for the organization.
- [Standard Bitbucket Integration](https://docs.envzero.com/guides/admin-guide/templates/bitbucket-integration.md): Connect Bitbucket Cloud repositories to env zero to create templates and manage deployments using the Bitbucket App for repository access.
- [Bitbucket Server Integration](https://docs.envzero.com/guides/admin-guide/templates/bitbucket-server-integration.md): Integrate Bitbucket Server or Data Center with env zero using a self-hosted agent and a personal access token with Repository write permissions.
- [AWS CloudFormation Integration](https://docs.envzero.com/guides/admin-guide/templates/cloudformation.md): Manage AWS CloudFormation stacks with env zero for automated provisioning, drift detection, and change set review using ENV0_CF_PARAM_ variables.
- [GitHub Enterprise Integration](https://docs.envzero.com/guides/admin-guide/templates/github-enterprise-integration.md): Integrate GitHub Enterprise Server with env zero using a self-hosted agent and a custom GitHub App for code cloning and PR plan status posting.
- [Standard GitHub Integration](https://docs.envzero.com/guides/admin-guide/templates/github-templates.md): Connect GitHub repositories to env zero using the GitHub App for template creation, deployments, and PR plans with branch or revision selection.
- [Gitlab Enterprise Integration](https://docs.envzero.com/guides/admin-guide/templates/gitlab-enterprise-integration.md): Integrate GitLab Enterprise with env zero using a self-hosted agent and a personal access token with read_repository and api scopes.
- [Standard Gitlab Integration](https://docs.envzero.com/guides/admin-guide/templates/gitlab-integration.md): Connect GitLab repositories to env zero using OAuth or personal access tokens for template creation, deployments, and PR plans with proper permissions.
- [Helm Integration](https://docs.envzero.com/guides/admin-guide/templates/helm.md): Deploy Helm charts with env zero from Git, Helm repositories, OCI registries, or S3, with helm diff and upgrade support for private chart repos.
- [Managing IaC Binaries Versions](https://docs.envzero.com/guides/admin-guide/templates/iac-binaries-versions.md): Specify and manage IaC tool versions in env zero templates for Terraform, OpenTofu, Terragrunt, Pulumi, and Ansible via environment variables.
- [Kubernetes (K8s) Integration](https://docs.envzero.com/guides/admin-guide/templates/k8s.md): Deploy Kubernetes resources with env zero using kubectl and Kustomize for per-environment labeling, PR plan integration, and drift detection.
- [OpenTofu](https://docs.envzero.com/guides/admin-guide/templates/opentofu.md): Configure and deploy OpenTofu templates with env zero using the tofu binary for HCL-based infrastructure as an open-source Terraform alternative.
- [Pulumi Integration](https://docs.envzero.com/guides/admin-guide/templates/pulumi.md): Deploy Pulumi stacks with env zero using Python, TypeScript, Go, and .NET, with PULUMI_ACCESS_TOKEN configuration and Pulumi remote backend state.
- [Using Self-Hosted VCS](https://docs.envzero.com/guides/admin-guide/templates/self-hosted-vcs.md): Connect self-hosted VCS providers to env zero with agent proxy support, covering GitHub Enterprise Server, Bitbucket Data Center, and GitLab.
- [Terraform](https://docs.envzero.com/guides/admin-guide/templates/terraform.md): Configure and deploy Terraform templates with env zero for infrastructure provisioning, state management, and drift detection using HashiCorp Terraform.
- [Terragrunt Integration](https://docs.envzero.com/guides/admin-guide/templates/terragrunt.md): Set up Terragrunt templates in env zero with run-all support, configurable binary selection, and module targeting for DRY infrastructure configurations.
- [Migrate from Terraform Cloud](https://docs.envzero.com/guides/admin-guide/tfc-migration.md): Migrate Terraform Cloud or Terraform Enterprise workspaces to env zero using the in-app wizard for workspace discovery, variable migration, and state move.
- [Connect and Scan](https://docs.envzero.com/guides/admin-guide/tfc-migration/connect-and-scan.md): Connect your Terraform Cloud or Terraform Enterprise organization to env zero and automatically discover all workspaces, variables, and variable sets.
- [Go Live](https://docs.envzero.com/guides/admin-guide/tfc-migration/go-live.md): Complete the Terraform Cloud migration with a controlled cutover that locks TFC workspaces and activates the corresponding env zero environments.
- [Resolve Issues](https://docs.envzero.com/guides/admin-guide/tfc-migration/resolve-issues.md): Review and fix any missing secrets or VCS connection gaps flagged by the migration wizard before proceeding with the Terraform Cloud migration.
- [Review and Migrate](https://docs.envzero.com/guides/admin-guide/tfc-migration/review-and-migrate.md): Review your selected Terraform Cloud workspaces and trigger one-click migration to create matching environments, variables, and state in env zero.
- [Troubleshooting](https://docs.envzero.com/guides/admin-guide/tfc-migration/troubleshooting.md): Fix common issues during Terraform Cloud migration, including credential errors, scan failures, state transfer problems, and drift detection.
- [User API Keys](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/api-keys.md): Create and manage API keys for programmatic access to env zero, the Terraform provider, and the private module registry, with configurable roles.
- [Custom Roles](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/custom-roles.md): Create and manage custom roles with tailored permissions in env zero, assignable at organization, project, and environment levels with deletion options.
- [Default Roles](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/default-roles.md): Built-in default roles at organization, project, and environment levels in env zero, including Organization Admin, Project Admin, and Project Deployer.
- [Role-Based Access Control (RBAC)](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/rbac.md): Manage permissions with role-based access control in env zero, using default and custom roles assignable at organization, project, and environment levels.
- [Assigning Roles](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/role-assignment.md): Assign roles to users and teams at organization, project, and environment levels in env zero, with cascading permissions and sub-project inheritance rules.
- [Manage Teams](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/teams.md): Create and manage teams in env zero to group users and assign permissions at organization, project, and environment levels, with SCIM provisioning support.
- [Manage Users](https://docs.envzero.com/guides/admin-guide/user-role-and-team-management/user-management.md): Add, invite, and manage users in your env zero organization with SSO via Azure Active Directory, SAML 2.0, and SCIM provisioning support.
- [Managing Variables](https://docs.envzero.com/guides/admin-guide/variables.md): Configure Terraform and shell environment variables across organization, project, template, and environment scopes in env zero for IaC deployments.
- [Manage Access Tokens](https://docs.envzero.com/guides/admin-guide/variables/access-tokens.md): Add and manage HTTP/S access tokens for private VCS repository access in env zero, covering GitHub, GitLab, and Bitbucket app password authentication.
- [Handling Common Errors](https://docs.envzero.com/guides/admin-guide/variables/common-errors.md): Troubleshoot common Terraform variable errors in env zero, including TF_VAR formatting for list and map types and sensitive variable configuration issues.
- [Working with Environment Outputs](https://docs.envzero.com/guides/admin-guide/variables/environment-outputs.md): Export and share environment outputs like VPC IDs and endpoints across env zero environments as input variables for Terraform, Pulumi, and CloudFormation.
- [Managing SSH Keys](https://docs.envzero.com/guides/admin-guide/variables/ssh-keys.md): Add and manage SSH keys at organization and project level in env zero for secure Git repository access with GitHub, GitLab, and Bitbucket setup.
- [Using Variable Sets](https://docs.envzero.com/guides/admin-guide/variables/variable-sets.md): Group related variables into reusable sets and assign them to organizations, projects, templates, or environments in env zero for consistent configuration.
- [Managing Workflow Variables](https://docs.envzero.com/guides/admin-guide/variables/workflow-variables.md): Configure variables for workflow sub-environments at the template level in env zero, including output passing between stacks and self-service defaults.
- [Workflow Overview](https://docs.envzero.com/guides/admin-guide/workflows.md): Orchestrate multi-environment deployments with dependency management using env zero workflows, defined declaratively in env0.workflow.yaml for pipelines.
- [Creating A New Workflow](https://docs.envzero.com/guides/admin-guide/workflows/create-a-new-workflow.md): Create an env zero workflow using env0.workflow.yaml, covering dependency definitions, approval priority order, and multi-environment workflow setup.
- [Workflow File JSON Schema](https://docs.envzero.com/guides/admin-guide/workflows/workflow-file-json-schema.md): JSON Schema definition for validating and auto-completing env0.workflow.yaml files in your IDE, covering environments and sub-environment dependencies.
- [Workflow File Reference](https://docs.envzero.com/guides/admin-guide/workflows/workflow-file-reference.md): Complete reference for the env0.workflow.yaml file schema, covering environments, sub-environment dependencies, settings, and requiresApproval options.
- [Partial Workflow Deployment](https://docs.envzero.com/guides/admin-guide/workflows/workflow-partial-deployment.md): Deploy or destroy subsets of an env zero workflow graph using Run From Here, single sub-environment redeploy, or single sub-environment destroy.
- [Managing Your Subscription](https://docs.envzero.com/guides/billing/managing-your-subscription.md): How to upgrade, switch, or cancel your env zero subscription, including billing cycle details, Stripe invoicing, and marketplace customer invoice access.
- [Purchase Options](https://docs.envzero.com/guides/billing/purchase-options.md): Purchase env zero via direct Stripe invoicing or private marketplace offers on AWS, Azure, and Google Cloud to consolidate spend with cloud billing.
- [Subscription Tiers](https://docs.envzero.com/guides/billing/subscription-tiers.md): Overview of env zero tiers - Cloud Compass, Cloud Navigator, and Cloud Pilot - covering IaC automation, drift management, cost monitoring, and support options.
- [Cloud Analyst](https://docs.envzero.com/guides/cloud-analyst/cloud-analyst.md): Use env zero Cloud Analyst to query deployment data with AI, build dashboards and insights, and manage environments at scale using the Explorer tab.
- [AI Chat Interface](https://docs.envzero.com/guides/cloud-analyst/cloud-analyst/ai-chat-interface.md): Query infrastructure data using natural language with env zero Cloud Analyst AI chat, then pin results to dashboards, save as insights, or download as CSV.
- [Dashboards](https://docs.envzero.com/guides/cloud-analyst/cloud-analyst/dashboards.md): Create and use Cloud Analyst dashboards in env zero by combining multiple insights into a single interactive page with predefined metrics and global filters.
- [env zero Model](https://docs.envzero.com/guides/cloud-analyst/cloud-analyst/env-zero-model.md): Explore the env zero Cloud Analyst data model covering entities including environments, deployments, state resources, cloud resources, and change events.
- [Explorer](https://docs.envzero.com/guides/cloud-analyst/cloud-analyst/explorer.md): Filter, search, and manage all environments from one centralized view with env zero Cloud Analyst Explorer, including bulk actions across multiple environments.
- [Insights](https://docs.envzero.com/guides/cloud-analyst/cloud-analyst/insights.md): Create single-chart insights in env zero Cloud Analyst using predefined metrics or the chart editor with fields, filters, aggregations, and 20+ chart types.
- [Cloud Compass](https://docs.envzero.com/guides/cloud-compass/cloud-compass.md): Discover and categorize unmanaged cloud resources with env zero Cloud Compass, track IaC coverage trends, assess drift risk severity, and generate IaC code.
- [Configure a GCP Cloud Account](https://docs.envzero.com/guides/cloud-compass/cloud-compass/configure-a-gcp-cloud-account.md): Connect a GCP project to env zero Cloud Compass by enabling the Cloud Logging API, creating a logging.viewer service account, and configuring Workload Identity.
- [Configure an Azure Cloud Account](https://docs.envzero.com/guides/cloud-compass/cloud-compass/configure-an-azure-cloud-account.md): Connect an Azure subscription to env zero Cloud Compass by exporting activity logs to Log Analytics and granting OIDC permissions with Log Analytics Reader.
- [Configure an AWS Cloud Account](https://docs.envzero.com/guides/cloud-compass/cloud-compass/configure-cloud-accounts.md): Connect your AWS account to env zero Cloud Compass by granting the cloud-scanner IAM role access to your S3 CloudTrail bucket and optionally KMS decryption.
- [Link Environments to Cloud Compass](https://docs.envzero.com/guides/cloud-compass/cloud-compass/linking-environments-to-cloud-compass-resources.md): Map env zero environments to discovered cloud resources in Cloud Compass using a resource identification engine that catalogs resources after each deployment.
- [SSH Key Management in env zero](https://docs.envzero.com/guides/collaborate-securely/authentication-tokens-and-ssh-keys/ssh-keys.md): Add and manage SSH keys at the organization level in env zero and associate them with templates or VCS environments to enable SSH connectivity in deployments.
- [User API Keys](https://docs.envzero.com/guides/collaborate-securely/collaboration-and-dev-tools/command-line-and-api-access/api-keys.md): Create and manage Admin, User, and Personal API keys in env zero for REST API access, Terraform provider use, and module registry with RBAC-scoped permissions.
- [OpenTofu Project](https://docs.envzero.com/guides/community-and-resources/community-and-open-source/opentofu.md): env zero is a founding member of OpenTofu, the open-source Terraform-compatible IaC tool backed by the Linux Foundation with a large provider ecosystem.
- [Terratag Project](https://docs.envzero.com/guides/community-and-resources/community-and-open-source/terratag.md): Terratag is the env zero CLI tool for applying consistent tags to AWS, GCP, and Azure resources across Terraform and Terragrunt codebases automatically.
- [Blog & Release Notes](https://docs.envzero.com/guides/community-and-resources/learn-more/blog-and-release-notes.md): Stay updated with the latest env zero features, IaC tutorials, infrastructure best practices, and product updates from the env zero blog and release notes.
- [Events & Webinars](https://docs.envzero.com/guides/community-and-resources/learn-more/events-and-webinars.md): Join env zero at upcoming events, webinars, and conferences to learn about Infrastructure-as-Code best practices and platform engineering
- [Guides & Tutorials](https://docs.envzero.com/guides/community-and-resources/learn-more/tutorials-and-how-tos.md): Tutorials and guides for env zero covering organization setup, workflow orchestration, custom flows, GitOps automation, and self-service access management.
- [env zero CLI Tool](https://docs.envzero.com/guides/community-and-resources/support-and-help/env-zero-cli.md): Install the env zero CLI via npm or yarn to deploy and destroy environments from your terminal with real-time deployment logs and approval support.
- [Support](https://docs.envzero.com/guides/community-and-resources/support-and-help/support.md): env zero support tiers - Silver, Gold, and Platinum SLAs with first-response times from best effort to 1 hour for critical issues, plus 99.9% uptime guarantees.
- [Configure AWS Costs](https://docs.envzero.com/guides/cost-monitoring/aws-costs.md): Set up AWS cost monitoring in env zero by creating an IAM role with Cost Explorer API access, enabling cost allocation tags, and registering the Role ARN.
- [Set Budget Notifications](https://docs.envzero.com/guides/cost-monitoring/budget-notifications.md): Configure project budget thresholds and notifications in env zero by enabling cost monitoring, setting timeframes and amounts, and alerting on breaches.
- [Set Cost Monitoring](https://docs.envzero.com/guides/cost-monitoring/cost-monitoring.md): Enable cloud cost monitoring in env zero using Terratag resource tagging and project-scoped credentials to view per-environment and per-project costs.
- [Configure GCP Costs](https://docs.envzero.com/guides/cost-monitoring/gcp-costs.md): Set up GCP cost monitoring in env zero by exporting billing data to BigQuery, creating a service account with BigQuery Job User and Data Viewer roles.
- [Configure Azure Costs](https://docs.envzero.com/guides/cost-monitoring/setup-azure-costs.md): Set up Azure cost monitoring in env zero by creating a service principal with the Cost Management Reader role via AZ CLI, then adding client ID and tenant ID.
- [Connect Your Cloud Account](https://docs.envzero.com/guides/getting-started/connect-your-cloud-account.md): Grant env zero permissions to manage resources in AWS, Azure, GCP, OCI, and Kubernetes using IAM roles, service principals, OIDC, or kubeconfig credentials.
- [Connect Your Git Repository](https://docs.envzero.com/guides/getting-started/connect-your-vcs.md): Connect your git repository to env zero using OAuth for GitHub.com, GitLab.com, and Bitbucket.org. SSH keys and HTTPS tokens for self-hosted providers.
- [Create Your First Template](https://docs.envzero.com/guides/getting-started/create-your-first-template.md): Create your first env zero template by linking a VCS from GitHub, GitLab, Bitbucket, or Azure DevOps, specifying an IaC folder, and assigning it to a project.
- [Create Your Organization](https://docs.envzero.com/guides/getting-started/create-your-organization.md): Create your env zero organization during initial onboarding, set a unique org name, and gain administrator access to manage projects, templates, and users.
- [Getting Started with env zero](https://docs.envzero.com/guides/getting-started/getting-started.md): Get started with env zero, an IaC platform for Terraform, OpenTofu, and Pulumi. Connect your VCS and cloud account, then deploy your first environment.
- [Glossary](https://docs.envzero.com/guides/getting-started/glossary.md): Definitions of core env zero concepts: templates, environments, projects, agents, variables, configuration sets, approval policies, custom flows, and more.
- [Deploy Your First Environment](https://docs.envzero.com/guides/getting-started/running-your-first-environment.md): Deploy your first IaC environment in env zero by selecting a template from your project, reviewing variables, clicking Run, and watching it deploy.
- [Supported Platforms](https://docs.envzero.com/guides/getting-started/supported-platforms.md): Deployment targets and IaC frameworks supported by env zero: AWS, Azure, GCP, OCI, Kubernetes, Terraform, OpenTofu, Terragrunt, Pulumi, Helm, and custom flows.
- [General Integrations](https://docs.envzero.com/guides/integrations/integrations.md): Overview of env zero integrations covering notifications, logs forwarding, OIDC authentication, plugins, IDPs, REST API, and CLI tooling.
- [Platform Overview](https://docs.envzero.com/guides/integrations/internal-developer-platforms.md): Integrate env zero with internal developer platforms, including Backstage, to give developers self-service access to IaC environments.
- [Backstage Integration](https://docs.envzero.com/guides/integrations/internal-developer-platforms/backstage.md): Set up the env zero Backstage plugin to give developers self-service IaC environment creation and management from within the Backstage catalog.
- [Logs Forwarding Overview](https://docs.envzero.com/guides/integrations/logs-forwarding.md): Forward deployment and audit logs from env zero to external observability platforms including Datadog, New Relic, CloudWatch, and Splunk.
- [Amazon CloudWatch](https://docs.envzero.com/guides/integrations/logs-forwarding/cloudwatch.md): Forward env zero deployment and audit logs to AWS CloudWatch log groups via OIDC authentication and an IAM policy with log write permissions.
- [Coralogix Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/coralogix.md): Send env zero deployment and audit logs to Coralogix using a Send-Your-Data API key and cluster URL, configured via the UI or environment variables.
- [Datadog Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/datadog.md): Forward env zero deployment and audit logs to Datadog using an API key and TCP over TLS endpoint, with separate service tags for audits and deployments.
- [Dynatrace Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/dynatrace.md): Forward env zero deployment and audit logs to Dynatrace using an API token with Ingest Logs scope, configured via environment variables on any scope.
- [Google Cloud Logging](https://docs.envzero.com/guides/integrations/logs-forwarding/gcp-logging.md): Send env zero deployment and audit logs to Google Cloud Logging using a Logs Writer service account credential, configured via UI or environment variables.
- [Grafana Loki Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/grafana-loki.md): Forward env zero deployment and audit logs to Grafana Loki using a host URL and Access Policy token, supporting both Grafana Cloud and self-hosted Loki.
- [Logz.io Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/logzio.md): Send env zero deployment and audit logs to Logz.io using a data shipping token and listener URL, configurable via the UI or environment variables.
- [New Relic Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/new-relic.md): Forward env zero deployment and audit logs to New Relic via the Log API, using a License Key and a region-specific endpoint for US, EU, or FedRAMP.
- [Amazon S3 Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/s3.md): Forward env zero deployment and audit logs to Amazon S3 using OIDC authentication and an IAM policy that grants PutObject access to the target bucket.
- [Splunk Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/splunk.md): Send env zero deployment and audit logs to Splunk via the HTTP Event Collector, using separate indexes for deployment and audit log streams.
- [Sumo Logic Logs](https://docs.envzero.com/guides/integrations/logs-forwarding/sumologic.md): Forward env zero deployment and audit logs to Sumo Logic by configuring an HTTP Source and providing the generated collector URL as an environment variable.
- [Manage Notifications](https://docs.envzero.com/guides/integrations/notifications.md): Configure env zero deployment notifications by creating Notification Targets for Slack, Email, Teams, and webhooks, then associating them with projects.
- [Email Notifications](https://docs.envzero.com/guides/integrations/notifications/email.md): Set up email notifications in env zero to deliver deployment events to comma-separated addresses, the environment creator, or the deployer.
- [Microsoft Teams Integration](https://docs.envzero.com/guides/integrations/notifications/microsoft-teams.md): Integrate env zero with Microsoft Teams by creating a Workflow App webhook flow to post deployment notifications to your chosen channel.
- [Slack Integrations](https://docs.envzero.com/guides/integrations/notifications/slack.md): Connect env zero to Slack for deployment notifications by installing the Incoming Webhooks app and configuring the webhook URL in Notification Targets.
- [Webhooks Notifications](https://docs.envzero.com/guides/integrations/notifications/webhooks.md): Set up webhook notifications in env zero to POST deployment event payloads to an HTTPS endpoint, with optional HMAC signature validation for security.
- [General OIDC Integrations](https://docs.envzero.com/guides/integrations/oidc-integrations.md): Configure OpenID Connect (OIDC) in env zero to issue short-lived JWT tokens for authenticating with AWS, Azure, GCP, and HashiCorp Vault.
- [Retrieve OIDC Subject Identifier](https://docs.envzero.com/guides/integrations/oidc-integrations/oidc-retrieving-your-subject-identifier.md): Retrieve your env zero OIDC subject identifier using the credential form, organization settings UI, a Run Task script, or a decode template.
- [OIDC for AWS](https://docs.envzero.com/guides/integrations/oidc-integrations/oidc-with-aws.md): Connect env zero to AWS using OIDC by creating an IAM Identity Provider, assigning an IAM role, and adding a sub claim condition to the trust policy.
- [OIDC for Azure](https://docs.envzero.com/guides/integrations/oidc-integrations/oidc-with-azure.md): Connect env zero to Azure using OIDC by registering an Azure AD App, configuring a Federated Credential, and assigning the app a Contributor role.
- [OIDC for GCP](https://docs.envzero.com/guides/integrations/oidc-integrations/oidc-with-google-cloud-platform.md): Connect env zero to GCP using OIDC by creating a Workload Identity Federation pool and provider, then granting access to a GCP Service Account.
- [OIDC for Vault](https://docs.envzero.com/guides/integrations/oidc-integrations/oidc-with-vault.md): Connect env zero to HashiCorp Vault using OIDC by enabling the JWT Authentication method, configuring a KV secrets store, and creating an access policy.
- [Plugins Overview](https://docs.envzero.com/guides/integrations/plugins.md): Use env zero plugins to extend deployments with reusable command sets in your env0.yaml custom flow, with support for OPA, Checkov, TFLint, and more.
- [Using the Checkov Plugin](https://docs.envzero.com/guides/integrations/plugins/checkov-plugin.md): Integrate the Checkov plugin with env zero to run IaC security scanning during deployments, requiring a target directory and optional CLI flags as inputs.
- [Using the Import Variable Plugin](https://docs.envzero.com/guides/integrations/plugins/import-variable-plugin.md): Use the Import Variable plugin in env zero custom flows to fetch outputs from other environments and inject them as Terraform or environment variables.
- [Using the Lightlytics Plugin](https://docs.envzero.com/guides/integrations/plugins/lightlytics-plugin.md): Run Lightlytics infrastructure simulations as a step within env zero deployments by adding the Lightlytics plugin to your env0.yaml custom flow.
- [Using the OPA Plugin](https://docs.envzero.com/guides/integrations/plugins/opa-plugin.md): Enforce policies in env zero deployments using the OPA plugin, which installs the opa binary and runs opa eval against a bundle path with a specified query.
- [Terragrunt Module Detection](https://docs.envzero.com/guides/integrations/plugins/terragrunt-modules-detection.md): Detect changed Terragrunt modules in pull requests and limit PR plan execution to only the modules affected by the changes using this env zero plugin.
- [Using the TFLint Plugin](https://docs.envzero.com/guides/integrations/plugins/tflint-plugin.md): Integrate the TFLint plugin with env zero to analyze Terraform code for syntax errors, deprecated syntax, and best-practice violations during deployments.
- [Using the TFsec Plugin](https://docs.envzero.com/guides/integrations/plugins/tfsec-plugin.md): Integrate the tfsec plugin with env zero to scan Terraform code for security misconfigurations and built-in rule violations during deployment pipelines.
- [Using the Trivy Plugin](https://docs.envzero.com/guides/integrations/plugins/trivy-plugin.md): Integrate the Trivy plugin with env zero to run a trivy config scan on your IaC directory, detecting misconfigurations and enforcing built-in security rules.
- [Security Overview](https://docs.envzero.com/guides/overview/security-overview.md): env zero security practices: SOC 2 Type II attestation, AWS-hosted infrastructure, HTTPS encryption, sandboxed deployment containers, and self-hosted agents.
- [Enable env zero Secrets](https://docs.envzero.com/guides/policies-governance/allow-env0-secrets.md): Control whether users can store sensitive data such as variables, SSH keys, and deployment credentials in env zero, using an organization-level policy.
- [Manage Approval Policies](https://docs.envzero.com/guides/policies-governance/approval-policies.md): Enforce deployment approval workflows in env zero using OPA rego policies assigned to templates or projects, evaluated after the plan and cost estimation steps.
- [Bypass Apply Mergeability Check](https://docs.envzero.com/guides/policies-governance/bypass-apply-mergeability-check.md): Resolve the circular dependency when env zero Apply is a required GitHub status check by excluding Apply checks from the PR mergeability evaluation.
- [Generating & Applying Fixes](https://docs.envzero.com/guides/policies-governance/code-optimizer/fixes.md): Generate AI-powered fixes for Code Optimizer issues and submit them as GitHub pull requests, then track resolution status through subsequent scans.
- [Code Optimizer Overview](https://docs.envzero.com/guides/policies-governance/code-optimizer/overview.md): Code Optimizer scans HCL repositories with TFLint and Checkov to detect security, quality, and compliance issues, then generates AI-powered pull request fixes.
- [Scanning Your Code](https://docs.envzero.com/guides/policies-governance/code-optimizer/scanning.md): Trigger Code Optimizer scans to analyze HCL repositories with TFLint and Checkov, then review issues categorized by severity, scanner, and current state.
- [Setup & Prerequisites](https://docs.envzero.com/guides/policies-governance/code-optimizer/setup.md): Configure Code Optimizer by connecting your VCS with the required permissions, selecting repositories, and meeting self-hosted agent version requirements.
- [Estimate Costs](https://docs.envzero.com/guides/policies-governance/cost-estimation.md): Set up Infracost cost estimation in env zero to calculate cloud resource costs at plan time for Terraform, OpenTofu, and Terragrunt deployments.
- [Enable Destroy Protection](https://docs.envzero.com/guides/policies-governance/destroy-protection.md): Prevent accidental destruction of environments in env zero by enabling destroy protection, which disables the Destroy button, TTL panel, and Scheduled Destroy.
- [Omitting Skipped Status Checks](https://docs.envzero.com/guides/policies-governance/do-not-report-skipped-status-check.md): Stop env zero from creating skipped PR plan status checks in your VCS, reducing noise in pull requests for monorepo setups with many env zero templates.
- [Set Environment Limits](https://docs.envzero.com/guides/policies-governance/environment-limits.md): Restrict the number of active environments in an env zero project by setting per-user and per-project limits in the Project Settings Policies tab.
- [Manage Policies](https://docs.envzero.com/guides/policies-governance/policies.md): Overview of runtime and OPA-based deployment policies in env zero for governing cloud resource provisioning, enforcing best practices, and applying guardrails.
- [Configure Policy TTL](https://docs.envzero.com/guides/policies-governance/policy-ttl.md): Set default and maximum TTL values for environments at organization or project level in env zero, with automated alert emails sent before scheduled destruction.
- [Ready-To-Use Policies](https://docs.envzero.com/guides/policies-governance/ready-to-use-policies.md): Pre-configured guardrails that you can integrate into your Infrastructure as Code workflows to enforce governance, security, and compliance standards
- [Skipping the Apply Step](https://docs.envzero.com/guides/policies-governance/skip-apply-step.md): Skip the apply step in env zero when a Terraform plan has no resource changes, reducing unnecessary approvals for continuous or scheduled deployments.
- [Skipping PR Plans on Merge Commits](https://docs.envzero.com/guides/policies-governance/skip-pr-plan-on-merge-commits.md): Prevent unnecessary PR plans in env zero by limiting file-change detection to files included in the PR, ignoring extra changes introduced by merge commits.
- [Avoiding Redundant Deployments](https://docs.envzero.com/guides/policies-governance/skip-redundant-deployments.md): Skip queued deployments in env zero to run only the latest version, reducing wait time for frequently changing environments with continuous deployment enabled.
- [Skipping State Refresh](https://docs.envzero.com/guides/policies-governance/skip-state-refresh.md): Skip Terraform state refresh in env zero as a last resort for state mismatches, equivalent to terraform plan -refresh=false and available only at destroy time.
- [Other SAML Providers](https://docs.envzero.com/guides/sso-integrations/additional-saml-providers.md): Connect any SAML-compatible identity provider to env zero for SSO. All SAML 2.0 providers are supported via self-service configuration or by contacting support.
- [AWS Single Sign On Integration](https://docs.envzero.com/guides/sso-integrations/aws-single-sign-on.md): Configure AWS SSO as a SAML 2.0 provider for env zero by creating a custom SAML app in IAM Identity Center, mapping user attributes, and completing the form.
- [Google Workspace Integration](https://docs.envzero.com/guides/sso-integrations/google-workspace.md): Set up Google Workspace as a SAML provider for env zero SSO by creating a custom SAML app, mapping user attributes and groups, and configuring the ACS URL.
- [Sync Roles &  Groups From Your IdP](https://docs.envzero.com/guides/sso-integrations/importing-roles-or-groups-from-your-identity-provider.md): Sync IdP groups to env zero teams at login via SAML group attributes, enabling automated team membership, RBAC role assignment, and admin role promotion.
- [JumpCloud Integration](https://docs.envzero.com/guides/sso-integrations/jumpcloud.md): Integrate JumpCloud as a SAML 2.0 identity provider for env zero using a custom SAML app with the ACS URL, entity ID, attribute mappings, and group sync.
- [Keycloak Integration](https://docs.envzero.com/guides/sso-integrations/keycloak.md): Configure Keycloak as a SAML identity provider for env zero by creating a SAML client with the correct entity ID, ACS URL, attribute mappers, and group mapper.
- [Okta Integration](https://docs.envzero.com/guides/sso-integrations/okta-integration.md): Set up Okta as a SAML 2.0 provider for env zero with attribute mappings, assertion encryption, group attribute statements for team sync, and SCIM provisioning.
- [OneLogin Integration](https://docs.envzero.com/guides/sso-integrations/onelogin.md): Integrate OneLogin as a SAML 2.0 identity provider for env zero using a custom SAML connector with the correct ACS URL, entity ID, attribute mappings, and cert.
- [SCIM Provisioning](https://docs.envzero.com/guides/sso-integrations/scim-provisioning.md): Sync users and groups from your identity provider to env zero with SCIM 2.0 for immediate deprovisioning and continuous provisioning without waiting for logins.
- [Azure Active Directory Integration](https://docs.envzero.com/guides/sso-integrations/self-service-azure-ad.md): Configure Microsoft Entra ID or Azure AD as an OAuth provider for env zero SSO with Redirect URI setup, client secret, group-based team syncing, and SCIM 2.0.
- [Self-Service SAML Setup](https://docs.envzero.com/guides/sso-integrations/self-service-saml.md): Self-service SAML 2.0 configuration for env zero covering the ACS URL, entity ID, required attribute mappings, and team syncing via groups or teams attributes.
- [Self-Service SSO Integration](https://docs.envzero.com/guides/sso-integrations/self-service-sso.md): Configure enterprise SSO from the env zero interface using SAML 2.0 or Azure Active Directory without support requests, plus optional SCIM 2.0 provisioning.
- [VMware Workspace ONE Integration](https://docs.envzero.com/guides/sso-integrations/vmware-workspace-one.md): Set up VMware Workspace ONE as a SAML 2.0 identity provider for env zero using Workspace ONE Access with the correct ACS URL, entity ID, and attribute mappings.
- [Overview: What is env zero?](https://docs.envzero.com/index.md): env zero is the cloud infrastructure governance platform for IaC automation, self-service with guardrails, drift management, cost monitoring, and RBAC.

## OpenAPI Specs

- [openapi](https://docs.envzero.com/api-reference/openapi.yml)

## Optional

- [Terraform Provider](https://registry.terraform.io/providers/env0/env0/latest)
- [Status Page](https://status.env0.com)
- [Schedule a Demo](https://www.env0.com/demo-request)
- [Free Trial](https://app.env0.com/)