Back to Skills
terraform-policy
Write, test, or convert Terraform Policy files (.policy.hcl, .policytest.hcl, Sentinel→tfpolicy). Triggers: policy.hcl, policytest, convert sentinel, tfpolicy, write a policy.
909stars134forksUpdated 10/26/2026
Security Assessment
Safe(100/100)
Security Score100/100
Detailed description not yet generated. View the SKILL.md tab for raw content.
All Files
55 filesexamples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.policy.hcl0.6 KB
Viewexamples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.policy.hcl0.5 KB
View.gitignore0.0 KB
Viewexamples/conversion/cloudfront-associated-with-waf/cloudfront-associated-with-waf.sentinel1.6 KB
Viewexamples/conversion/cloudtrail-server-side-encryption-enabled/README.md0.8 KB
Viewexamples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.policy.hcl0.6 KB
Viewexamples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.sentinel2.9 KB
Viewexamples/conversion/ec2-vpc-default-security-group-no-traffic/README.md1.1 KB
Viewexamples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.policy.hcl0.5 KB
Viewexamples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.sentinel1.5 KB
Viewexamples/conversion/elasticsearch-https-required/README.md0.9 KB
Viewexamples/conversion/cloudfront-associated-with-waf/README.md0.9 KB
Viewexamples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.policy.hcl0.5 KB
Viewexamples/conversion/dms-endpoints-should-use-ssl/dms-endpoints-should-use-ssl.sentinel1.4 KB
Viewexamples/conversion/ec2-network-acl-should-have-subnet-ids/README.md0.9 KB
Viewexamples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.policy.hcl0.4 KB
Viewexamples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/elasticache-redis-replication-group-encryption-at-transit-enabled.sentinel1.5 KB
Viewexamples/conversion/elasticsearch-encrypted-at-rest/README.md0.7 KB
Viewexamples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.policy.hcl0.6 KB
Viewexamples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.sentinel2.1 KB
Viewexamples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.sentinel3.2 KB
Viewexamples/conversion/secretsmanager-auto-rotation-enabled-check/README.md0.9 KB
Viewexamples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.policy.hcl0.7 KB
Viewreferences/tfpolicy-author.md96.9 KB
Viewexamples/conversion/cloudtrail-server-side-encryption-enabled/cloudtrail-server-side-encryption-enabled.sentinel1.4 KB
Viewexamples/conversion/dms-endpoint-should-be-ssl-configured/README.md0.9 KB
Viewexamples/conversion/ec2-network-acl-should-have-subnet-ids/ec2-network-acl-should-have-subnet-ids.policy.hcl1.0 KB
Viewexamples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.sentinel3.6 KB
Viewexamples/conversion/efs-access-point-should-enforce-user-identity/README.md0.7 KB
Viewexamples/conversion/elasticsearch-encrypted-at-rest/elasticsearch-encrypted-at-rest.policy.hcl0.6 KB
Viewexamples/conversion/elasticsearch-https-required/elasticsearch-https-required.sentinel2.3 KB
Viewexamples/conversion/elasticsearch-in-vpc-only/README.md0.9 KB
Viewexamples/conversion/s3-block-public-access-bucket-level/README.md1.1 KB
Viewexamples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.policy.hcl1.0 KB
Viewexamples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.sentinel2.2 KB
Viewexamples/conversion/dms-endpoint-should-be-ssl-configured/dms-endpoint-should-be-ssl-configured.sentinel1.5 KB
Viewexamples/conversion/dms-endpoints-should-use-ssl/README.md0.8 KB
Viewexamples/conversion/ec2-vpc-default-security-group-no-traffic/ec2-vpc-default-security-group-no-traffic.policy.hcl0.8 KB
Viewexamples/conversion/efs-access-point-should-enforce-user-identity/efs-access-point-should-enforce-user-identity.sentinel1.3 KB
Viewexamples/conversion/elasticache-redis-replication-group-encryption-at-transit-enabled/README.md0.8 KB
Viewexamples/conversion/elasticsearch-https-required/elasticsearch-https-required.policy.hcl1.1 KB
Viewexamples/conversion/elasticsearch-in-vpc-only/elasticsearch-in-vpc-only.sentinel1.9 KB
Viewexamples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/README.md1.1 KB
Viewexamples/conversion/s3-bucket-should-have-object-lock-enabled/README.md1.0 KB
Viewexamples/conversion/secretsmanager-auto-rotation-enabled-check/secretsmanager-auto-rotation-enabled-check.policy.hcl0.8 KB
Viewexamples/conversion/step-functions-state-machine-logging-enabled/step-functions-state-machine-logging-enabled.sentinel1.6 KB
Viewreferences/tfpolicy-test.md44.9 KB
Viewexamples/conversion/eventbridge-custom-event-bus-should-have-attached-policy/eventbridge-custom-event-bus-should-have-attached-policy.policy.hcl0.8 KB
Viewexamples/conversion/s3-block-public-access-bucket-level/s3-block-public-access-bucket-level.policy.hcl1.2 KB
Viewexamples/conversion/s3-bucket-should-have-object-lock-enabled/s3-bucket-should-have-object-lock-enabled.sentinel2.8 KB
Viewexamples/conversion/step-functions-state-machine-logging-enabled/README.md0.8 KB
ViewREADME.md2.7 KB
ViewSKILL.md3.9 KB
Viewexamples/README.md2.5 KB
Viewreferences/verified-syntax.md99.0 KB
ViewInstall terraform-policy
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
hashicorp/agent-skills