Skip to content
Skip to contents
Skip to reading controls

Search skills⌘K

Setting the file. One moment.

This file

Type

Size

Lines

Position

hashicorp
/
hashicorp/agent-skills

README · Terraform Policy · hashicorp/agent-skills · Skills Docs

Repo No. 84 · Terraform Policy

↖Back to the cover

Packer

AWS Ami Builder
Azure Image Builder
Push To Registry
Windows Builder

Terraform

Azure Verified Modules
New Terraform Provider
Provider Actions
Provider Configuration
Provider Docs
Provider Ephemeral Resources
Provider Framework Migration
Provider Resources
Provider Test Patterns
Refactor Module
Run Acceptance Tests
Terraform Policy
Terraform Search Import
Terraform Stacks
Terraform Style Guide
Terraform Test

20 skills · 53 min

Skill 16 · Terraform Policy

Subchapter 16.26

README

examples/conversion/elasticsearch-in-vpc-only/README.mdMarkdown890 BView on GitHub

Elasticsearch In VPC Only

Source Sentinel Policy

16Up to skill 16Terraform Policy

On this page

Elasticsearch In VPC Only
Source Sentinel Policy
Conversion Quality
Why this is limited
What the tfpolicy approximation does
Limitations encountered

This file

Number: 16.26
Position: 26 of 38
Type: Markdown
Size: 890 B

Nearby

Previous Elasticsearch In VPC Only Policy
Next Eventbridge Custom Event Bus Should Have Attached Policy Policy

Source

16.8README · cloudtrail-server-side-encryption-enabled

16.9Dms Endpoint Should Be SSL Configured Policy

16.10README · dms-endpoint-should-be-ssl-configured

16.11Dms Endpoints Should Use SSL Policy

⋯25 more in the appendix

16.26README · elasticsearch-in-vpc-only

elasticsearch-in-vpc-only.sentinel

Conversion Quality

Limited

Why this is limited

The Sentinel policy is config-oriented and accepts either constant subnet IDs or references inside vpc_options.subnet_ids. tfpolicy does not expose the same config-level constant_value and references metadata, so it cannot preserve that distinction exactly.

What the tfpolicy approximation does

The tfpolicy version checks the planned end state and requires vpc_options[0].subnet_ids to contain one or more values.

Limitations encountered

It validates the resulting planned subnet IDs, not whether they originated from constants vs references
It assumes the provider exposes vpc_options and subnet_ids in the expected schema shape
It is a useful enforcement approximation, but not a one-to-one tfconfig translation

Bundled fileElasticsearch In VPC Only Policy Bundled fileEventbridge Custom Event Bus Should Have Attached Policy Policy

examples/conversion/elasticsearch-in-vpc-only/README.md

(opens in a new tab)

Raw file(opens in a new tab)

hashicorp/agent-skills(opens in a new tab)