Pre-written policy library reference
This topic provides reference information about the Sentinel and Terraform policy library that HashiCorp authors and maintains. For instructions on how to run the policy libraries, refer to Configure a Terraform policy set with pre-written policies and Configure a Sentinel policy set with pre-written policies.
AWS policies
HashiCorp publishes pre-written policies for the following AWS standards.
Center for Internet Security (CIS)
The Center for Internet Security (CIS) is a non-profit organization that publishes prescriptive guidance for configuring secure cloud services. Refer to the CIS website for additional information.
CIS refers to their standards as benchmarks. HashiCorp publishes pre-written policies that support the following CIS benchmarks for AWS:
- Amazon Web Services Foundations version 1.2. Refer to the AWS documentation for additional information about this version.
- Amazon Web Services Foundations version 1.4. Refer to the AWS documentation for additional information about this version.
- Amazon Web Services Foundations version 3.0. Refer to the AWS documentation for additional information about this version.
Foundational Security Best Practices (FSBP)
The Foundational Security Best Practices (FSBP) standard enforces security best practices on AWS resources. HashiCorp publishes pre-written policies that support the following AWS FSBP standards:
- AWS Foundational Security Best Practices v1.0.0. Refer to the AWS documentation for additional information.
Azure policies
HashiCorp publishes pre-written policies for the following Azure standards.
Center for Internet Security (CIS)
The Center for Internet Security (CIS) is a non-profit organization that publishes prescriptive guidance for configuring secure cloud services. Refer to the CIS website for additional information.
CIS refers to their standards as benchmarks. HashiCorp publishes pre-written policies that support the following CIS benchmarks for Azure:
- Microsoft Azure Foundation (6.0.0). Refer to Azure documentation for additional information about this version.
Google Cloud Platform (GCP) policies
HashiCorp publishes pre-written policies for the following Google Cloud standards.
Center for Internet Security (CIS)
The Center for Internet Security (CIS) is a non-profit organization that publishes prescriptive guidance for configuring secure cloud services. Refer to the CIS website for additional information.
CIS refers to their standards as benchmarks. HashiCorp publishes pre-written policies that support the following CIS benchmarks for GCP:
- Google Cloud Platform Foundation (5.0.0). Refer to GCP documentation for additional information about this version.