README
¶
Terraform Validator
Overview
As your business shifts towards an infrastructure-as-code workflow, security and cloud administrators are concerned about misconfigurations that may cause security and governance violations.
Cloud Administrators need to be able to put up guardrails that follow security best practices and help drive the environment towards programmatic security and governance while enabling developers to go fast.
Terraform Validator allows your administrators to enforce constraints on developer machines and as part of your CI/CD pipeline, allowing you to check for constraint violations and provide warnings or halt invalid deployments before they reach production.
One way to define constraints
Constraints are designed to be compatible with tools across the deployment lifecycle. The same set of constraints that you use with Terraform Validator can also be used with any other tool that supports them, either at deploy-time or as an audit of deployed resources. These constraints live in your organization's repository as the source of truth for your security and governance requirements. You can obtain constraints from the Policy Library, or build your own constraint templates.
Table of Contents
- Install Terraform Validator
- User guide
- Tutorial
- Creating a policy library
- Supported resources
- Contributing
Disclaimer
This is not an officially supported Google product.
Documentation
¶
There is no documentation for this package.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package ancestrymanager provides an interface to query the ancestry information for a project.
|
Package ancestrymanager provides an interface to query the ancestry information for a project. |
|
converters
|
|
|
google
In order to interact with resource converters, we need to be able to create "terraform resource data" that supports a very limited subset of the API actually used during the conversion process.
|
In order to interact with resource converters, we need to be able to create "terraform resource data" that supports a very limited subset of the API actually used during the conversion process. |
|
google/resources
---------------------------------------------------------------------------- This file is copied here by Magic Modules.
|
---------------------------------------------------------------------------- This file is copied here by Magic Modules. |
|
Package tfgcv pulls together the other packages in this project to take a terraform plan, extract the planned resources in Google CAI format, and run those CAI assets through the Config Validator.
|
Package tfgcv pulls together the other packages in this project to take a terraform plan, extract the planned resources in Google CAI format, and run those CAI assets through the Config Validator. |