Enforcing AWS AMI images with OPA
Allow or Disallow AMI IDs using OPA policies
Enforcing AWS Resource Tags with OPA
Using OPA policies to enforce resource tags and corresponding values
First policy as code using OPA
Using OPA policies to catch dangerous actions during Terraform plan phase
How I Learned the Hard Way That Terraform Needs Policy as Code
Case study: a deleted Terraform state bucket forced a rebuild of 15 AWS accounts. How that incident became a policy-as-code guardrail that stops dangerous changes at plan time.