The safeguards map / 3.7 Admission and owner settings
Atlantis (policy checking)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Atlantis's policy checking runs the owner's Conftest policies against a Terraform plan and blocks the apply while any policy fails, unless the named policy owners approve.
Where it sits
3.7 Admission and owner settings (primary): Runs server-side Conftest policies, written in Rego by the owner, against a Terraform plan and blocks the apply when a policy fails until the policy set's owners approve it.
Atlantis supports running server-side conftest policies against the plan output.
captured
blocks applies on plans that fail any of the defined conftest policies.
captured
Conftest policies are based on Open Policy Agent (OPA) and written in rego
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- owner-entered settings
Handoffs
consumes Policy: Conftest policies written in Rego
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.