#Sentinels of terra review how to
#Sentinels of terra review pdf
#Sentinels of terra review code

You can use three different methods for testing your Terraform Sentinel policies: Methods for Testing Sentinel Policies for Terraform This guide focuses primarily on the first type of Sentinel policy that uses the tfplan import, but we do cover the other imports in later sections. We expect additional Sentinel imports to be added to Terraform in the near future to allow Sentinel policies to inspect workspace metadata attributes and cost estimates. The third type uses the tfstate import to check whether any previously provisioned resources, data sources, or outputs have attribute values that are no longer allowed by your governance policies. The second type uses the tfconfig import to restrict the configuration of Terraform modules, variables, resources, data sources, providers, provisioners, and outputs. The first and most common type of policy uses the tfplan import to restrict attributes of specific resources or data sources. There are essentially three types of Sentinel policies for Terraform which correspond to these three Sentinel imports: tfplan, tfconfig, and tfstate. Types of Sentinel Policies for Terraform Enterprise Finally, it includes examples and exercises to practice writing Sentinel policies and test your understanding of them. It also discusses the differences between policies meant for use with Terraform 0.11.x and 0.12.x.

#Sentinels of terra review how to

It also covers useful Sentinel operators, functions, and concepts, and how to use the Sentinel Simulator to test your policies.

This guide discusses the types of Sentinel policies in Terraform and lays out a general methodology for writing and testing Sentinel policies for Terraform. Unless overridden by an authorized user, only plans that pass all Sentinel policies checked against them are allowed to proceed to the apply step.

Terraform enforces Sentinel policies between the plan and apply phases of a run, preventing out of policy infrastructure from being provisioned. Sentinel policies define rules that restrict the provisioning of resources by Terraform configurations.

#Sentinels of terra review code

Sentinel allows customers to implement governance policies as code in the same way that Terraform allows them to implement infrastructure as code. This guide provides instruction for writing and testing Sentinel policies for Terraform.

Those slides also contain links to hands-on labs that you can use to complete the exercises described in this guide. You can also review the slides from the Sentinel for Terraform v3 workshop which cover many of the ideas of this guide in a more condensed form.

#Sentinels of terra review pdf

We recommend that you use the newer third-generation policies and functions instead and that you download this revised third edition of the PDF and read that instead of this HTML version. It uses second-generation examples from the hashicorp/terraform-guides repository. Note: This version of this guide was originally published in March, 2019.