├── .gitignore ├── README.md ├── Testing-Terraform-Sentinel-Policies-Using-Mocks.pptx ├── aws-s3-bucket └── main.tf ├── gcp-compute-instance └── main.tf └── sentinel ├── require-private-acl-and-kms-for-s3-buckets.sentinel ├── restrict-gce-machine-type.sentinel └── test ├── require-private-acl-and-kms-for-s3-buckets ├── fail-acl-and-kms.json ├── fail-acl.json ├── fail-kms.json ├── mock-tfplan-fail-acl-and-kms.sentinel ├── mock-tfplan-fail-acl.sentinel ├── mock-tfplan-fail-kms.sentinel ├── mock-tfplan-pass.sentinel └── pass.json └── restrict-gce-machine-type ├── fail.json ├── mock-tfplan-fail.sentinel ├── mock-tfplan-pass.sentinel └── pass.json /.gitignore: -------------------------------------------------------------------------------- 1 | *tfstate* 2 | .terraform 3 | .DS_Store 4 | 5 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/README.md -------------------------------------------------------------------------------- /Testing-Terraform-Sentinel-Policies-Using-Mocks.pptx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/Testing-Terraform-Sentinel-Policies-Using-Mocks.pptx -------------------------------------------------------------------------------- /aws-s3-bucket/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/aws-s3-bucket/main.tf -------------------------------------------------------------------------------- /gcp-compute-instance/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/gcp-compute-instance/main.tf -------------------------------------------------------------------------------- /sentinel/require-private-acl-and-kms-for-s3-buckets.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/require-private-acl-and-kms-for-s3-buckets.sentinel -------------------------------------------------------------------------------- /sentinel/restrict-gce-machine-type.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/restrict-gce-machine-type.sentinel -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/fail-acl-and-kms.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/fail-acl-and-kms.json -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/fail-acl.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/fail-acl.json -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/fail-kms.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/fail-kms.json -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-fail-acl-and-kms.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-fail-acl-and-kms.sentinel -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-fail-acl.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-fail-acl.sentinel -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-fail-kms.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-fail-kms.sentinel -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-pass.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/mock-tfplan-pass.sentinel -------------------------------------------------------------------------------- /sentinel/test/require-private-acl-and-kms-for-s3-buckets/pass.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/require-private-acl-and-kms-for-s3-buckets/pass.json -------------------------------------------------------------------------------- /sentinel/test/restrict-gce-machine-type/fail.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/restrict-gce-machine-type/fail.json -------------------------------------------------------------------------------- /sentinel/test/restrict-gce-machine-type/mock-tfplan-fail.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/restrict-gce-machine-type/mock-tfplan-fail.sentinel -------------------------------------------------------------------------------- /sentinel/test/restrict-gce-machine-type/mock-tfplan-pass.sentinel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/restrict-gce-machine-type/mock-tfplan-pass.sentinel -------------------------------------------------------------------------------- /sentinel/test/restrict-gce-machine-type/pass.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rberlind/HashiConf-2019/HEAD/sentinel/test/restrict-gce-machine-type/pass.json --------------------------------------------------------------------------------