Terraform Policy

Terraform lets you describe the infrastructure you want and automatically creates, deletes, and modifies your existing infrastructure to match. OPA makes it possible to write policies that test the changes Terraform is about to make before it makes them.

• https://github.com/instrumenta/conftest
• https://github.com/fugue/regula
• https://github.com/accurics/terrascan
• https://github.com/Checkmarx/kics
• https://github.com/open-policy-agent/library/tree/master/terraform
• https://github.com/accurics/terrascan/tree/master/pkg/policies/opa/rego
• https://github.com/Checkmarx/kics/tree/master/assets/queries/terraform

• https://www.openpolicyagent.org/docs/terraform.html
• https://github.com/instrumenta/conftest/blob/master/README.md

• https://blog.styra.com/blog/policy-based-infrastructure-guardrails-with-terraform-and-opa

• Terraform in the OPA Ecosystem
  • www.terraform.io/
• Amazon Public Cloud in the OPA Ecosystem
  • aws.com
• Google Public Cloud in the OPA Ecosystem
  • cloud.google.com/
• Microsoft Public Cloud in the OPA Ecosystem
  • azure.microsoft.com/

• Fugue in the OPA Ecosystem
  • www.fugue.co
• Accurics in the OPA Ecosystem
  • www.accurics.com/
• Checkmarx in the OPA Ecosystem
  • www.checkmarx.com
• Medallia in the OPA Ecosystem
  • www.medallia.com/
• Styra in the OPA Ecosystem
  • styra.com
• Docker in the OPA Ecosystem
  • www.docker.com/
• Snyk in the OPA Ecosystem
  • snyk.io/