Terraform Compliance Simplified

FAQ

Frequently asked questions answered

What is compliance.tf?

Compliance.tf is a web service/SaaS that acts as a proxy service for Terraform modules. It validates and updates the Terraform configs to enforce compliance controls (e.g., security controls for PCI DSS compliance).

Who is behind compliance.tf?

We are building it on top of the experience we gained during 8+ years of building and maintaining open-source Terraform AWS modules that were provisioned more than 2 billion times worldwide.

Why should I use compliance.tf?

We help companies by providing Terraform modules automatically prepared according to the controls required by the compliance frameworks of your choice. We have done it already and can ship it as native Terraform modules. Also, there is no lock-in.

We want companies to make it impossible to create incompliant infrastructure resources using our solutions.

Why did we do it?

Using the solutions by compliance.tf, we aim to help companies create a significantly better (and more secure) infrastructure based on well-maintained Terraform AWS modules, even if you're not planning to get a compliance review.

We start with what we know very well - Terraform AWS modules, with support for your own Terraform modules coming later.

How to get access to it?

Log in into your AWS account and go to the "Compliance-Ready Terraform AWS Modules" product page on AWS Marketplace. After purchase, you will be able to invite your team members who manage infrastructure resources (e.g. DevOps engineers) to obtain access to the private Terraform registry. Currently, we provide access to S3 bucket module. Please read the documentation for more information.