
The compliance.tf Registry Is Now Public
The compliance.tf registry is live and open to anyone. Here is why a compliance-aware Terraform registry matters, what it gives you, and how to pull your first module in about five minutes.
Plan. Apply. Comply. A blog by compliance.tf
Product updates, engineering notes, and audit-ready implementation patterns for teams building AWS infrastructure with Terraform and OpenTofu.
Get updates by email:

The compliance.tf registry is live and open to anyone. Here is why a compliance-aware Terraform registry matters, what it gives you, and how to pull your first module in about five minutes.

A practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the compliance.tf registry.

Introducing Operational Rules — your platform standards, enforced at terraform init. No more forking modules to add lifecycle blocks.

Compare the hidden costs of building compliance yourself on terraform-aws-modules with the built-in controls and managed maintenance that compliance.tf provides.

Learn how to validate compliance.tf modules with IaC scanners before deployment and infrastructure scanners after, what evidence auditors need, and how pre-apply and post-apply verification work together.

Replace after-the-fact Terraform scanning with modules that have built-in compliance controls, blocking non-compliant AWS infrastructure before it reaches your plan.