- What are the main components of Sentinel and getting started?
6
- Context for the Demo
7
- High level steps for getting Sentinel up and running
8
- Beginning of the Demo - Writing a Sentinel Policy from Scratch
9
- Creating the Sentinel root file
10
- Writing the Sentinel policy file
11
Q - - How does Sentinel work with Terraform Plan files?
12
Q - - What are Sentinel Params?
13
- Looking through changed resources in Sentinel
14
- Pulling tag values off of AWS EC2 instances in Sentinel
15
- Writing the rule helper and informational failure messages
16
- Grabbing all EC2 instances violating the Sentinel rules
17
Q - - is it better to write positive or negative test with Sentinel?
18
- Understanding and Using "Predicate Rules" in Sentinel
19
- Wrapping the "Predicate Rules" in a "Main Rule"
20
- Using the Sentinel policy with Terraform Cloud Workspaces
21
- Using existing Sentinel policies with Terraform Cloud Workspaces
22
Q - - Can you use Sentinel Policies with resources that have calculated values? e.g. post apply
23
- Summary and Conclusion
Description:
Dive into a comprehensive tutorial on enforcing standards and best practices across Terraform code using HashiCorp's policy-as-code tool, Sentinel. Learn everything needed to get started with Sentinel, from writing policies from scratch to implementing vetted policies from the Terraform Registry. Explore the main components of Sentinel, understand policy as code concepts, and follow along with a detailed demo on creating and implementing Sentinel policies. Discover how to use Sentinel with Terraform Cloud Workspaces, handle resources with calculated values, and leverage existing policies for immediate production use. Gain insights into writing effective rules, using predicate rules, and integrating Sentinel into your infrastructure automation workflow.
Enforcing Standards on Terraform with HashiCorp Sentinel