Terraform Compliance
A lightweight, security and compliance focused test framework for Terraform.
Overview
terraform-compliance is a test framework that allows you to write policies for your Terraform code using a BDD (Behavior Driven Development) style. This makes the policies easy to read and understand for both technical and non-technical stakeholders. It runs against your Terraform plan file to check for violations before you apply your changes.
✨ Key Features
- BDD-style policy authoring
- Tests against Terraform plan files
- Focus on security and compliance
- Customizable policies
🎯 Key Differentiators
- BDD-style syntax makes policies easy to read and write.
- Focus specifically on Terraform compliance.
- Lightweight and easy to integrate.
Unique Value: Terraform Compliance makes it easy for all stakeholders, including those who are not developers, to understand and contribute to infrastructure policies through its human-readable BDD format.
🎯 Use Cases (3)
✅ Best For
- Ensuring all S3 buckets have encryption enabled
- Preventing the creation of overly permissive security groups
- Enforcing tagging policies on all resources
💡 Check With Vendor
Verify these considerations match your specific requirements:
- Functional testing of infrastructure (Terratest is better suited for this)
🏆 Alternatives
While other policy as code tools use more code-centric languages, Terraform Compliance's BDD approach improves collaboration and clarity.
💻 Platforms
✅ Offline Mode Available
🔌 Integrations
💰 Pricing
Free tier: Open-source and free to use.
🔄 Similar Tools in Terraform Modules
Gruntwork
Provides a library of reusable, production-grade Terraform modules and DevOps expertise....
Cloud Posse
Offers a massive library of open-source Terraform modules and a framework for building production-gr...
terraform-aws-modules
Open-source Terraform modules for provisioning AWS resources....
Claranet
A managed services provider that publishes and maintains a collection of open-source Terraform modul...
compliance.tf
A private Terraform registry that validates and remediates modules to ensure they meet compliance st...
HashiCorp AWS Modules
A set of Terraform modules for AWS services, officially published and maintained by HashiCorp....