Implementing OPA with Terraform the Easy Way

A few days ago, I was pleasantly surprised to discover that TFLint has a ruleset plugin for writing custom rules in Rego. For those who don’t know, I tend to roll my own CI/CD pipelines, scanning, and most of the other pieces that make up a solid IaC experience. I’ve been slightly envious of Terraform Cloud users with Sentinel and the Spacelift crowd who get policy enforcement out of the box.