Sentinel
HashiCorp's policy-as-code language, which HCP Terraform uses to check every plan against rules before it can apply.
In more detail
Sentinel policies are grouped into policy sets with an enforcement level: advisory warns, soft mandatory blocks until someone with permission overrides it, and hard mandatory blocks with no override. Open Policy Agent is the other framework HCP Terraform supports.
Example
enforcement_level = "soft-mandatory"Related terms
- policy set — A group of Sentinel or OPA policies that HCP Terraform applies globally, to projects or to chosen workspaces.
- enforcement level — How strictly HCP Terraform enforces a failed policy or run task: from a warning to a block nobody can override.
- Open Policy Agent — A general-purpose policy engine that evaluates Rego policies against JSON input and returns a JSON decision.
- policy as code — Writing organisational rules, such as required tags or allowed regions, as code that automatically checks every proposed change.
Taught in
- Collaboration And Governance: Teams, Policies, Registry And Health — HashiCorp Terraform Associate (004) Exam Prep