New Terraform Tutorial: Manage Private Environments using Terraform Cloud Agents
Manage private environments through Terraform Cloud using self-hosted agents.
Terraform Cloud’s Business Tier offering allows you to manage resources in private data centers using self-hosted agents. The standard Terraform Cloud setup requires that any resources managed by remote execution are accessible over public internet. With agents, you can also manage infrastructure in private environments without modifying your network perimeter to allow for public ingress. The agent runs within your environment and polls Terraform Cloud for workloads to execute. It is available as both a Docker container and standalone x86 binary.

In the new tutorial, you will configure a containerized Terraform Cloud agent to run on your local machine and manage an Nginx container. By the end of the exercise, you will know how to configure your Terraform Cloud workspaces to use agents for infrastructure management.
» Next Steps
Terraform Cloud agents allow you to take advantage of the Terraform Cloud management interface for more of your infrastructure topology without exposing the resources to the public internet. To get a broader picture of Terraform Cloud Agents and Terraform Cloud/Enterprise, visit the resources below:
- Learn more in the Terraform Cloud Agents documentation.
- Read about other Business Tier features.
- Explore the Terraform Cloud/Enterprise provider.
For even more news about our latest tutorials being added to HashiCorp Learn, follow @HashiCorp on Twitter.
Sign up for the latest HashiCorp news
More blog posts like this one

Terraform ephemeral resources, Waypoint actions, and more at HashiDays 2025
HashiCorp Terraform, Waypoint, and Nomad continue to simplify hybrid cloud infrastructure with new capabilities that help secure infrastructure before deployment and effectively manage it over time.

Terraform migrate 1.1 adds VCS workspace support and enhanced GitOps
Terraform migrate 1.1 adds support for VCS workspaces, expanded Git capabilities, and greater control through both the CLI.

Terraform adds new pre-written Sentinel policies for AWS Foundational Security Best Practices
HashiCorp and AWS introduced a new pre-written policy library to help organizations meet AWS’s Foundational Best Security Practices (FSBP).