Skip to content

Guides

Step-by-step guides for getting started, migrating, integrating CI/CD, and evaluating compliance.tf.

Get StartedSet up compliance.tf and run your first compliant terraform plan typically in under 10 minutesPlatformMigration GuideMigrate from terraform-aws-modules in 7 stepsPlatformAudit EvidenceGenerate compliance artifacts for your auditorsSecurityMake the CaseJustify compliance.tf to your leadership teamPlatform

CI/CD Integration

CI/CD OverviewPrerequisites, authentication, multi-environment setup, and troubleshootingPlatformGitHub ActionsToken setup, complete workflow example, and Checkov verificationCI/CDGitLab CIProtected CI/CD variables and pipeline YAML configurationCI/CDTerraform CloudWorkspace environment variables and variable sets for the TFC runnerCI/CDOther PlatformsSpacelift, Atlantis, env0, Jenkins, and generic CI environmentsCI/CD

Compare Approaches

Compare ApproachesHow compliance.tf works alongside Checkov, OPA, Control Tower, and custom wrappersSecurityvs Checkov / TrivyPreventive enforcement vs IaC scanning — how the layers combineSecurityvs OPA / SentinelSecure defaults vs policy gating — when to use eachSecurityvs Custom WrappersManaged compliance modules vs in-house wrapper maintenancePlatformvs AWS Control TowerResource-level controls vs account-level governanceSecurity