thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Intermediate

Policy as Code

Expressing security, compliance, and operational policies in code that is versioned and automatically evaluated.

Definition

Policy engines such as Open Policy Agent (Rego), HashiCorp Sentinel, Kyverno, Azure Policy, and AWS Config rules check IaC plans or live resources and can block non-compliant changes.

Example

A Sentinel policy blocks any Terraform plan that creates a public S3 bucket.

Exam tip

Know Sentinel for HCP Terraform, OPA/Gatekeeper and Kyverno for Kubernetes, Azure Policy for Azure.

Related terms