Terraform Policy
Check resources are compliant before they're deployed.
Terraform lets you describe the infrastructure you want and automatically creates, deletes, and modifies your existing infrastructure to match. OPA makes it possible to write policies that test the changes Terraform is about to make before it makes them.
Blogs:
- Blog > Policy Based Infrastructure Guardrails With Terraform And OPA (blog.styra.com)
Code:
- Instrumenta > Conftest (github.com)
- Fugue > Regula (github.com)
- Accurics > Terrascan (github.com)
- Checkmarx > Kics (github.com)
- Open Policy Agent > Library > Tree > Master > Terraform (github.com)
- Accurics > Terrascan > Tree > Master > Pkg > Policies > OPA > Rego (github.com)
- Checkmarx > Kics > Tree > Master > Assets > Queries > Terraform (github.com)
Tutorials:
- Docs > Terraform.html (openpolicyagent.org)
- Instrumenta > Conftest > Blob > Master > README.md (github.com)
Category: publiccloud
Layer: orchestration
Layer: orchestration