Book Image

Terraform Cookbook - Second Edition

By : Mikael Krief
4.5 (2)
Book Image

Terraform Cookbook - Second Edition

4.5 (2)
By: Mikael Krief

Overview of this book

Imagine effortlessly provisioning complex cloud infrastructure across various cloud platforms, all while ensuring robustness, reusability, and security. Introducing the Terraform Cookbook, Second Edition - your go-to guide for mastering Infrastructure as Code (IaC) effortlessly. This new edition is packed with real-world examples for provisioning robust Cloud infrastructure mainly across Azure but also with a dedicated chapter for AWS and GCP. You will delve into manual and automated testing with Terraform configurations, creating and managing a balanced, efficient, reusable infrastructure with Terraform modules. You will learn how to automate the deployment of Terraform configurations through continuous integration and continuous delivery (CI/CD), unleashing Terraform's full potential. New chapters have been added that describe the use of Terraform for Docker and Kubernetes, and explain how to test Terraform configurations using different tools to check code and security compliance. The book devotes an entire chapter to achieving proficiency in Terraform Cloud, covering troubleshooting strategies for common issues and offering resolutions to frequently encountered errors. Get the insider knowledge to boost productivity with Terraform - the indispensable guide for anyone adopting Infrastructure as Code solutions.
Table of Contents (20 chapters)
16
Other Books You May Enjoy
17
Index

Checking the compliance of Terraform configurations using OPA in Terraform Cloud

The aspect of Terraform configuration tests was discussed in Chapter 11, Running Test and Compliance Security on Terraform Configuration, such as using Open Policy Agent (OPA), which was covered in the Using Open Policy Agent for Terraform compliance recipe.

In Terraform, compliance tests are carried out after the terraform plan command is executed. They verify that the result of the plan command corresponds to the rules described in the tests. Only if these tests have passed can the terraform apply command be executed.

Among the tools and frameworks for compliance testing, Terraform Cloud offers, in its free and paid plans, the stack, which allows us to write tests using the Sentinel or OPA framework and execute them directly in Terraform Cloud. This is done by using the run action between the plan and apply commands.

In this recipe, we will study a simple case of integrating OPA compliance...