antonbabenkocompliance.tf
compliance.tf is a Terraform control layer: it makes a Terraform estate provable, with the controls built into the modules, held before apply, and mapped to the clauses your auditor asks about.
compliance.tf on the stream11 entries
- talkThe judgment gap: when Terraform scans clean but fails the audit (COM302)AWS re:invent 2026, Las Vegas, Nevada, United States, upcoming
- postFrom Fork to One Source Line: Operational Rules for terraform-aws-modulesThree forks of terraform-aws-modules that exist to hold one lifecycle block, and the source line that replaces each of them. See the diff first in the Rules Playground, then register a free account and change one line.
- postRules Preview, the Playground, and Six More Rules Are LiveSee the diff an Operational Rule makes on the module root before you change a source line, pick from fifteen rules, group them into a Baseline and rulesets, and read the known Terraform limits module by module.
- postHashiCorp's tfpolicy Made Module Source a Policy Decisiontfpolicy evaluates policy before Terraform downloads a module. At that stage a policy can only allow or deny a source string, which makes the catalog behind the string the thing that decides the outcome.
- postThe compliance.tf Registry Is Now PublicThe compliance.tf registry is live and open to anyone. Here is why a compliance-aware Terraform registry matters, what it gives you, and how to pull your first module in about five minutes.
- releaseawesome-terraform-complianceTools, frameworks and resources for implementing compliance, security and governance controls in Terraform and OpenTofu infrastructure.
- postDebugging terraform init: 401, 403, 502, and What Your Headers Are Telling YouA practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the compliance.tf registry.
- postStop Paying the Terraform Fork TaxIntroducing Operational Rules — your platform standards, enforced at terraform init. No more forking modules to add lifecycle blocks.
- postWhy Enterprises Choose Compliance.tf Over terraform-aws-modulesCompare the hidden costs of building compliance yourself on terraform-aws-modules with the built-in controls and managed maintenance that compliance.tf provides.
- postVerifying Compliance.tf Modules: From Guardrails to Audit EvidenceLearn how to validate compliance.tf modules with IaC scanners before deployment and infrastructure scanners after, what evidence auditors need, and how pre-apply and post-apply verification work together.
- postMake Non-Compliant Terraform Impossible With Compliance.tfReplace after-the-fact Terraform scanning with modules that have built-in compliance controls, blocking non-compliant AWS infrastructure before it reaches your plan.