Why I Changed What Compliance.tf Says It Is
Compliance.tf now leads with the controls your Terraform enforces and the proof behind them. What triggered the change, who it is for, and what shipped with it.
Blog
Blog
Posts on Terraform, compliance controls and the compliance.tf registry, by Anton Babenko.
RSS feedSee which controls a module enforces
Every framework page lists each control, the clauses it maps to, and whether a module enforces it.
Open the framework pagesFrom Fork to One Source Line: Operational Rules for terraform-aws-modules
Three forks of terraform-aws-modules that exist to hold one lifecycle block, and the source line that replaces each of them. See the diff first in the Rules Playground, then register a free account and change one line.
Rules Preview, the Playground, and Six More Rules Are Live
See the diff an Operational Rule makes on the module root before you change a source line, pick from fifteen rules, group them into a Baseline and rulesets, and read the known Terraform limits module by module.
HashiCorp's tfpolicy Made Module Source a Policy Decision
tfpolicy evaluates policy before Terraform downloads a module. At that stage a policy can only allow or deny a source string, which makes the catalog behind the string the thing that decides the outcome.
The Compliance.tf Registry Is Now Public
The compliance.tf registry is live and open to anyone. Here is why a compliance-aware Terraform registry matters, what it gives you, and how to pull your first module in about five minutes.
Debugging terraform init: 401, 403, 502, and What Your Headers Are Telling You
A practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the compliance.tf registry.
Stop Paying the Terraform Fork Tax
Introducing Operational Rules — your platform standards, enforced at terraform init. No more forking modules to add lifecycle blocks.
Why Enterprises Choose Compliance.tf Over terraform-aws-modules
Compare the hidden costs of building compliance yourself on terraform-aws-modules with the built-in controls and managed maintenance that compliance.tf provides.
Verifying Compliance.tf Modules: From Guardrails to Audit Evidence
Learn how to validate compliance.tf modules with IaC scanners before deployment and infrastructure scanners after, what evidence auditors need, and how pre-apply and post-apply verification work together.
Make Non-Compliant Terraform Impossible With Compliance.tf
Replace after-the-fact Terraform scanning with modules that have built-in compliance controls, blocking non-compliant AWS infrastructure before it reaches your plan.
