https://compliance.tf/blog/ Engineering notes, product updates, and compliance guidance for Terraform teams building with compliance.tf. en-US Fri, 13 Nov 2026 11:20:34 GMT https://compliance.tf/blog/why-i-changed-what-compliance-tf-says-it-is/ https://compliance.tf/blog/why-i-changed-what-compliance-tf-says-it-is/ Wed, 04 Nov 2026 00:00:00 GMT Compliance.tf now leads with the controls your Terraform enforces and the proof behind them. What triggered the change, who it is for, and what shipped with it. https://compliance.tf/blog/from-fork-to-one-source-line/ https://compliance.tf/blog/from-fork-to-one-source-line/ Sat, 12 Sep 2026 00:00:00 GMT Three forks of terraform-aws-modules that exist to hold one lifecycle block, and the source line that replaces each of them. See the diff first in the Rules Playground, then register a free account and change one line. https://compliance.tf/blog/rules-preview-and-playground-are-live/ https://compliance.tf/blog/rules-preview-and-playground-are-live/ Thu, 10 Sep 2026 00:00:00 GMT See the diff an Operational Rule makes on the module root before you change a source line, pick from fifteen rules, group them into a Baseline and rulesets, and read the known Terraform limits module by module. https://compliance.tf/blog/hashicorp-tfpolicy-module-source-governance/ https://compliance.tf/blog/hashicorp-tfpolicy-module-source-governance/ Tue, 28 Jul 2026 00:00:00 GMT tfpolicy evaluates policy before Terraform downloads a module. At that stage a policy can only allow or deny a source string, which makes the catalog behind the string the thing that decides the outcome. https://compliance.tf/blog/compliance-tf-registry-is-now-public/ https://compliance.tf/blog/compliance-tf-registry-is-now-public/ Tue, 09 Jun 2026 00:00:00 GMT The compliance.tf registry is live and open to anyone. Here is why a compliance-aware Terraform registry matters, what it gives you, and how to pull your first module in about five minutes. https://compliance.tf/blog/debugging-terraform-init-failures/ https://compliance.tf/blog/debugging-terraform-init-failures/ Mon, 30 Mar 2026 00:00:00 GMT A practical guide to diagnosing terraform init failures against private registries using curl, HTTP headers, and the compliance.tf registry. https://compliance.tf/blog/stop-paying-the-terraform-fork-tax/ https://compliance.tf/blog/stop-paying-the-terraform-fork-tax/ Wed, 25 Mar 2026 00:00:00 GMT Introducing Operational Rules — your platform standards, enforced at terraform init. No more forking modules to add lifecycle blocks. https://compliance.tf/blog/why-enterprises-choose-compliance-tf/ https://compliance.tf/blog/why-enterprises-choose-compliance-tf/ Fri, 06 Mar 2026 00:00:00 GMT Compare the hidden costs of building compliance yourself on terraform-aws-modules with the built-in controls and managed maintenance that compliance.tf provides. https://compliance.tf/blog/verifying-compliance-tf-modules/ https://compliance.tf/blog/verifying-compliance-tf-modules/ Thu, 27 Nov 2025 00:00:00 GMT Learn how to validate compliance.tf modules with IaC scanners before deployment and infrastructure scanners after, what evidence auditors need, and how pre-apply and post-apply verification work together. https://compliance.tf/blog/make-non-compliant-terraform-impossible/ https://compliance.tf/blog/make-non-compliant-terraform-impossible/ Wed, 26 Nov 2025 00:00:00 GMT Replace after-the-fact Terraform scanning with modules that have built-in compliance controls, blocking non-compliant AWS infrastructure before it reaches your plan.