policy set

A group of Sentinel or OPA policies that HCP Terraform applies globally, to projects or to chosen workspaces.

In more detail

A policy set uses one framework, but a workspace can have several sets. Policies in them run after the plan and cost estimation, before the run can be applied. Storing policy sets in version control keeps them reviewed and auditable.

Example

no-deletes policy set on every production workspace

Related terms

• Sentinel — HashiCorp's policy-as-code language, which HCP Terraform uses to check every plan against rules before it can apply.
• enforcement level — How strictly HCP Terraform enforces a failed policy or run task: from a warning to a block nobody can override.
• Open Policy Agent — A general-purpose policy engine that evaluates Rego policies against JSON input and returns a JSON decision.

Taught in

• Collaboration And Governance: Teams, Policies, Registry And Health — HashiCorp Terraform Associate (004) Exam Prep
• The Full Mock: Sixty Minutes, Eight Areas, One Plan For The Last Week — HashiCorp Terraform Associate (004) Exam Prep

References

• HCP Terraform: Manage policy sets

Certification courses

• Terraform Associate course and practice exam: HashiCorp Terraform Associate (004)