CtrlK
BlogDocsLog inGet started
Tessl Logo

nicholasjackson/opa-rego-language

Rego is the declarative policy language used by Open Policy Agent (OPA). This tile covers writing and testing Rego policies for Kubernetes admission control, Terraform and infrastructure-as-code plan validation, Docker container authorization, HTTP API authorization, RBAC and role-based access control, data filtering, metadata annotations with opa inspect, and OPA policy testing with opa test.

99

1.19x

Quality

Pending

Does it follow best practices?

Impact

99%

1.19x

Average score across 31 eval scenarios

SecuritybySnyk

Pending

The risk profile of this skill

Overview
Eval results
Files

task.mdevals/scenario-19/

Terraform: S3 Bucket Versioning

We use OPA to validate Terraform plans before they are applied. Write a Rego policy that prevents S3 buckets from being created or updated without versioning enabled.

The policy must handle both ways versioning can be configured:

  1. Inline on the aws_s3_bucket resource (via the versioning block with enabled = true)
  2. As a separate aws_s3_bucket_versioning resource (where versioning_configuration.status must be "Enabled")

The policy must support both raw Terraform input and HCP Terraform / Terraform Enterprise input.

evals

scenario-19

rubric.json

task.md

README.md

rules.md

tile.json