tf-policy

Terraform policy-as-code validates configurations by defining standard blocks like resource_policy, provider_policy, and module_policy to constrain deployments. It ensures infrastructure changes meet governance requirements before deployment by applying guards across resources, providers, and modules.

You test Terraform policy definitions by using .policytest.hcl files with meta, attrs, and prior_attrs mocks. This validates policy behavior across lifecycle stages like setup, plan, and apply using deterministic evaluation inputs.

Terraform policy enforcement levels allow advisory or mandatory rules with operation-scoped applicability across setup, plan, and apply stages. This lets you choose whether policies warn or block non-compliant infrastructure changes during deployment.

Yes, policy-as-code supports module_policy and provider_policy block types alongside resource_policy to express guards across resources, providers, and modules. This allows you to enforce compliance constraints across your entire Terraform infrastructure stack.

You map compliance baselines by centralizing policy definitions in .policy.hcl files using resource_policy, provider_policy, and module_policy blocks. Meta and input local attributes enable deterministic evaluation to align compliance requirements with policy syntax.