Open Policy Agent and Terraform - Examining a Terraform Execution Plan with Rego

Open Policy Agent (OPA) can inspect a Terraform execution plan using Rego policy language once the plan has been converted into JSON. Admittedly, the execution plan is incredibly verbose and not the easiest to parse, so in this video we are going to use the interactive OPA shell to explore the execution plan document.

We will cover:

🌮 Top level keys of the execution plan
🌮 How to filter on specific resource types and actions
🌮 How to build helper functions for common tasks
🌮 How to import functions and create policy rules

You can follow along by using the code found here:
🐙 https://github.com/ned1313/learning-o...

📔💵 You can pick up my Terraform Certified study guide for $5 off until April 7th by following this link: https://leanpub.com/terraform-certifi...

Thank you so much for watching! Subscribe if you think I’ve earned it. Hit the bell as well if you’re feeling swell.❤️&🌮

✅🔔 Subscribe ► https://nedinthecloud.com/SubscribeYT
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
🌮 Other videos in the OPA and Terraform series :

📽️ How to Use Open Policy Agent for Better Infrastructure Management:    • How to Use Open Policy Agent with Ter...  
📽️ Using OPA with Terraform - Rego Basics:    • Using OPA with Terraform - Rego Basics  

More to come!

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
🌮 Timestamps:

⌚ 0:00 Intro
⌚ 2:10 Generating a Terraform execution plan in JSON
⌚ 5:56 Exploring the execution plan with OPA's interactive shell
⌚ 8:22 Viewing and filtering the planned values
⌚ 10:45 Viewing and filtering resource changes
⌚ 13:26 Creating a helper function
⌚ 15:32 Using a library of helper functions
⌚ 19:19 Outro

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
#terraform #openpolicyagent #hashicorp #devops #cloudengineer #techlearning
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
⭐ CONNECT WITH ME 🏃🦖

🌐 Day Two Cloud: https://daytwocloud.io
🌐 Chaos Lever: https://chaoslever.com
🌐 Visit my Website ► https://nedinthecloud.com
🗳 Pluralsight ► https://app.pluralsight.com/profile/a...
🐙 Find the code at GitHub► https://github.com/ned1313
🐧 Twitter ►   / ned1313  
👨‍💼 LinkedIn►   / ned-bellavance  

For collaboration or any queries: [email protected]
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
🌮 About Me 🌮

Ned is a curious human with a knack for creating entertaining and informative content. With over 20 years in the industry, Ned brings real-world experience to all his creative endeavours, whether that's pontificating on a podcast, delivering live instruction, writing certification guides, or producing technical training videos. He has been a helpdesk operator, systems administrator, cloud architect, and product manager. In his newest incarnation, Ned is the Founder of Ned in the Cloud LLC. As a one-man-tech juggernaut, he develops courses for Pluralsight, runs two podcasts (Day Two Cloud and Chaos Lever, and creates original content for technology vendors.

Ned has been a Microsoft MVP since 2017 and a HashiCorp Ambassador since 2020, and he holds a bunch of industry certifications that have no bearing on anything beyond his exceptional ability to take exams and pass them. When not in front of the camera, keyboard, and microphone, you can find Ned running the scenic trails of Pennsylvania or rocking out to live music in his hometown of Philadelphia. Ned has three guiding principles: Embrace discomfort, Fail often, and Be kind.