Use a Version Control System (VCS) to store your policies

One way to create policy sets is by connecting HCP Terraform to a version control repository that contains policies. When you push changes to the repository, HCP Terraform automatically uses the updated policy set.

Policy enforcement supports both HCL and the JSON variant of HCL syntax. The configuration file contains one or more policy blocks that define each policy in the policy set.

Version Control System (VCS) setup for Terraform policy

Integrate HCP Terraform with your version control system (VCS) so that it can evaluate policies written for Terraform policy.

Version Control System (VCS) setup for Sentinel

Integrate HCP Terraform with your version control system (VCS) so that it can evaluate policies written for Sentinel.

Version Control System (VCS) setup for Open Policy Agent (OPA)

Integrate HCP Terraform with your version control system (VCS) so that it can evaluate policies written for Open Policy Agent (OPA).

HashiCorp Sentinel policy library for AWS

HashiCorp publishes pre-written policies for some AWS standards.

Review the full list of implemented standards at HashiCorp policy library for AWS.

Learn how to use the HashiCorp-managed policy library for Sentinel at Use HashiCorp Sentinel policy library for AWS