medium10 pts · first answer countsdevsecopsinfrastructure-as-codepolicy-as-code

Policy checks on a Terraform plan

You want to block any Terraform change that creates a public S3 bucket, using rules written as code and checked in CI before apply. What is a common approach?

A.Review the AWS bill each month for new bucketsB.Ask reviewers to search the PR for the word publicC.Run OPA rules with conftest against the plan in JSOND.Apply first, then delete public buckets with a script

Discussion 0

Join free to post in the discussion.

Policy checks on a Terraform plan

Discussion 0

Related questions