Pre-written policy library reference

This topic provides reference information about the Sentinel and Terraform policy library that HashiCorp authors and maintains. For instructions on how to run the policy libraries, refer to Configure a Terraform policy set with pre-written policies and Configure a Sentinel policy set with pre-written policies.

AWS policies

HashiCorp publishes pre-written policies for the following AWS standards.

Center for Internet Security (CIS)

The Center for Internet Security (CIS) is a non-profit organization that publishes prescriptive guidance for configuring secure cloud services. Refer to the CIS website for additional information.

CIS refers to their standards as benchmarks. HashiCorp publishes pre-written policies that support the following CIS benchmarks for AWS:

Amazon Web Services Foundations version 1.2. Refer to the AWS documentation for additional information about this version.
Amazon Web Services Foundations version 1.4. Refer to the AWS documentation for additional information about this version.
Amazon Web Services Foundations version 3.0. Refer to the AWS documentation for additional information about this version.

Foundational Security Best Practices (FSBP)

The Foundational Security Best Practices (FSBP) standard enforces security best practices on AWS resources. HashiCorp publishes pre-written policies that support the following AWS FSBP standards:

AWS Foundational Security Best Practices v1.0.0. Refer to the AWS documentation for additional information.

ISO/IEC 27001:2013 Annex A

International Electrotechnical Commission (IEC) and International Organization for Standardization (ISO) are independent, non-governmental, not-for-profit organizations that develop and publish international software standards.

The ISO/IEC 27001:2013 standard defines guidelines on how to establish, implement, maintain, and continually improve an information security management system. Annex A describes a set of information security controls, including cloud services governance, for mitigating risks identified in an information security management system. Refer to the AWS ISO/IEC 27001:2013 Annex A user guide for more information about the standard.

Refer to the 27001:2013 Annex A policy set repository for details about the policies HashiCorp publishes and maintains to support ISO/IEC 27001:2013 Annex A.

PCI DSS

The Payment Card Industry Data Security Standard (PCI DSS) is a set of rules for protecting payment data throughout the data's lifecycle. Compliance with PCI DSS is mandatory for organizations that handle credit card information. Refer to the PCI DSS website for more information about the standard.

HashiCorp publishes pre-written policies that support the following PCI DSS standards for AWS:

AWS PCI DSS version 4.0.1. Refer to the PCI Document Library for additional information about this version.
AWS PCI DSS version 3.2.1. Refer to the PCI Document Library for additional information about this version.

Refer to the PCI DSS policy set repository for details about the policies HashiCorp publishes and maintains.

NIST SP 800-53 Revision 5

NIST Special Publication 800-53 Revision 5 (NIST SP 800-53 Rev. 5) framework provides a catalog of security and privacy requirements for protecting the confidentiality, integrity, and availability of information systems and critical resources. Refer to the AWS NIST SP 800-53 documentation for information about the AWS implementation.

Refer to NIST SP 800-53 policy set repository for details about these policies.

Azure policies

HashiCorp publishes pre-written policies for the following Azure standards.

Center for Internet Security (CIS)

The Center for Internet Security (CIS) is a non-profit organization that publishes prescriptive guidance for configuring secure cloud services. Refer to the CIS website for additional information.

CIS refers to their standards as benchmarks. HashiCorp publishes pre-written policies that support the following CIS benchmarks for Azure:

Microsoft Azure Foundation (6.0.0). Refer to Azure documentation for additional information about this version.

Google Cloud Platform (GCP) policies

HashiCorp publishes pre-written policies for the following Google Cloud standards.

Center for Internet Security (CIS)

The Center for Internet Security (CIS) is a non-profit organization that publishes prescriptive guidance for configuring secure cloud services. Refer to the CIS website for additional information.

CIS refers to their standards as benchmarks. HashiCorp publishes pre-written policies that support the following CIS benchmarks for GCP:

Google Cloud Platform Foundation (5.0.0). Refer to GCP documentation for additional information about this version.