---
# generated by https://github.com/hashicorp/terraform-plugin-docs
page_title: "orcasecurity_integration_akamai Resource - orcasecurity"
subcategory: ""
description: |-
  Manage an Akamai integration in Orca.
---

# orcasecurity_integration_akamai (Resource)

Manages an [Akamai](https://www.akamai.com/) integration in Orca Security.

Under the hood this creates an entry under `POST /api/external_service/config`
with `service_name = "akamai"`. Orca uses Akamai EdgeGrid credentials
(`access_token`, `client_token`, `client_secret`, `host`) to call Akamai APIs;
the three token values are stored in Orca's secret store and are never returned
by the API.

## Example Usage

### Basic example

```terraform
# Akamai integration
resource "orcasecurity_integration_akamai" "example" {
  template_name = "cred_name"
  host          = "akab-xxxxxxxx.luna.akamaiapis.net"
  access_token  = var.akamai_access_token
  client_token  = var.akamai_client_token
  client_secret = var.akamai_client_secret
  is_enabled    = true
  is_default    = false
}
```

### Sourcing credentials from HashiCorp Vault

```terraform
data "vault_generic_secret" "akamai" {
  path = "secret/akamai/orca"
}

resource "orcasecurity_integration_akamai" "from_vault" {
  template_name = "akamai-prod"
  host          = data.vault_generic_secret.akamai.data["host"]
  access_token  = data.vault_generic_secret.akamai.data["access_token"]
  client_token  = data.vault_generic_secret.akamai.data["client_token"]
  client_secret = data.vault_generic_secret.akamai.data["client_secret"]
}
```

## Argument Reference

* `template_name` — (Required, String) Identifier for the integration as shown
  in the Orca UI. Changing this forces a new resource.
* `host` — (Required, String) Akamai EdgeGrid host.
* `access_token` — (Required, String, Sensitive) Akamai EdgeGrid `access_token`.
* `client_token` — (Required, String, Sensitive) Akamai EdgeGrid `client_token`.
* `client_secret` — (Required, String, Sensitive) Akamai EdgeGrid `client_secret`.
* `is_enabled` — (Optional, Bool) Defaults to `true`.
* `is_default` — (Optional, Bool) Defaults to `false`.

## Attribute Reference

* `id` — (String) Orca external service config identifier (UUID).

## Notes

* Orca strips `access_token`, `client_token`, and `client_secret` from `GET`
  responses (they live in SSM). The provider keeps the values already in
  Terraform state to avoid permanent diffs. Rotate through
  `terraform apply`; for out-of-band rotation use
  `terraform apply -replace=orcasecurity_integration_akamai.example`.
* Use an encrypted remote backend (S3 + KMS, GCS, Terraform Cloud, etc.) and
  restrict read access to the state — the secrets land in state regardless of
  the `sensitive = true` flag.

## Import

```bash
terraform import orcasecurity_integration_akamai.example cred_name
```

After import, set the three token arguments in your configuration — the API
does not return them.