News for hackers. Stuff that matters.

A comment on Show HN: Policy_sentry, an AWS IAM Least Privilege Policy Generator. Parent comment

Re:Show HN: Policy_sentry, an AWS IAM Least Privilege Policy... by philsnow on Tuesday October 15, 2019 @06:29PM (#21264680)
https://www.openpolicyagent.org/docs/latest/terraform/ very neat, I hadn't seen opa used in this way before.
[ Parent | on HN ]
Re:Show HN: Policy_sentry, an AWS IAM Least Privilege Policy... by kmcquade on Tuesday October 15, 2019 @06:46PM (#21264840)
Oh yeah it's super powerful. And it's not vendor-dependent like Sentinel & TF Enterprise (although I really love TF Cloud).

Here's an example of using OPA + Conftest with Terraform that you might be interested in: https://github.com/kmcquade/conftest-terraform-multifolder-p...

[ Parent | on HN ]