News for hackers. Stuff that matters.
Re:Show HN: Policy_sentry, an AWS IAM Least Privilege Policy... by philsnow on Tuesday October 15, 2019 @06:32PM (#21264709)
Hashicorp has a tool/framework for this, Sentinel https://www.hashicorp.com/sentinel/

I haven't used it in production. It uses an even-more-baroque syntax than terraform's HCL dialect, and using it kind of assumes that all your modifications go through terraform.

Re:Show HN: Policy_sentry, an AWS IAM Least Privilege Policy... by kmcquade on Tuesday October 15, 2019 @06:47PM (#21264856)
Yep. Sentinel is for paid customers only, so it has to go through Terraform enterprise.