tf-policy

What problem does it solve?

Terraform policy as code provides a single source of truth for validating and constraining Terraform configurations. tf-policy defines the standard blocks, evaluation semantics, and tooling references to ensure infrastructure changes meet governance and compliance requirements before they are deployed.

Core Features & Use Cases

• Policy blocks: Supports resource_policy, provider_policy, and module_policy to express guards across resources, providers, and modules.
• Testing & evaluation: Uses .policytest.hcl mocks with meta, attrs, and prior_attrs to validate policy behavior across lifecycle stages.
• Enforcement levels & lifecycle: Enables advisory or mandatory policies with operation-scoped applicability and evaluation stages for setup/plan/apply.
• Documentation reference: Centralizes policy definitions and semantics to map compliance baselines to tfpolicy syntax.

Quick Start

Create a sample tf-policy resource_policy and validate it with tfpolicy test against a mock plan.