This repositories accompanies the Styra DAS Terraform System Type documentation the tutorial for integrating Terraform Cloud with Styra DAS by using Terraform Cloud run tasks. The tutorial along with this codebase will help you set up DAS policy guardrails for a demo Terraform Cloud workspace.
New to Styra DAS? Try out the Terraform Cloud integration by signing up for the Styra DAS Free plan.
Note: The run task feature in Terraform Cloud is only available to Terraform Cloud organizations on the Team & Governance or Business plans.
New to Open Policy Agent's Rego policy language? Check out Styra's Rego Style Guide.
Styra DAS integrations with your Terraform Cloud workspaces using run tasks, ensuring resource changes are evaluated against policy guardrails defined in DAS before Terraform applies those changes. Below is an overview diagram of the run task integration.
In this repository you'll find the code which configures your Terraform Cloud workspace and uses the fictitious Terraform Fake Web Services provider to create a fakewebservices_vpc resource for demonstration purposes without needing a cloud provider account.
To give you an idea about what policy for Terraform and Terraform Cloud might look like, this repository provides several example policies in the following directories:
policy/fws/vpc: Fake Web Services provider's VPC Terraform resource policiespolicy/tfc/runs: General Terraform Cloud run policies
Additionally, you can use any policies from Styra's Terrform Policy Library within DAS.