Abbey provides a web‑based platform that extends Terraform‑based Infrastructure as Code workflows to automate granting, revoking, and auditing user access to cloud, data, and identity resources. It lets engineers discover resources, submit access requests, and enforce approvals through Terraform policies, while logging every change to Git for an immutable audit trail and supporting real‑time revocation and CI/CD integration.
Funding
$5.3M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
7OPVFounders
Product
Problem
Organizations using Infrastructure as Code often lack automated mechanisms to grant, revoke, and audit user access to cloud and data resources, leading to excessive permissions, manual ticket processes, and compliance gaps.
Solution
Abbey extends existing IaC workflows by providing a web‑based platform that automates access requests, approvals, and revocations across any provider available on the Terraform Registry. Engineers can discover resources, submit access requests, and have those requests enforced through Terraform‑driven policies without opening tickets. All access changes are logged to the organization’s version‑control system (e.g., GitHub, GitLab), creating an immutable audit trail for security and compliance. Real‑time revocation and integration with CI/CD pipelines keep permissions up‑to‑date as infrastructure evolves. The solution supports unlimited resources, integrations, and request volumes, enabling teams to scale security automation without friction.
Target Audience
Primary customers are DevOps and security engineering teams in mid‑size to large enterprises that manage cloud, data, and identity infrastructure through Terraform.
Features
- Integration with any Terraform Registry provider (AWS, Azure, GCP, Kubernetes, Okta, Snowflake, etc.) for unified access control
- Web UI for resource discovery, request submission, and approval workflow management
- Automated logging of all access changes to Git repositories, providing immutable audit records
- Real‑time access revocation triggered by policy changes or request expirations
- CI/CD integration to enforce up‑to‑date permissions as part of deployment pipelines
- Unlimited resources, roles, groups, and access requests per account
- Dedicated onboarding assistance and Slack/email support for enterprise teams