AWS Sentinel Policies - Intel Cloud Optimization Modules

© Copyright 2022, Intel Corporation

Sentinel Policies for AWS Modules

This library, provides prescriptive Terraform and Sentinel policies that can be used to establish a seemless and performant baseline Terraform configuration for Amazon Web Services. The policies that are contained in this library are based on the Open-Source Database Tuning Guide on 3rd Generation Intel® Xeon® Scalable Processors Based Platform. Terraform Cloud/Enterprise users can use the policies in this library to establish a foundational level of instance verification and enforcement for the database services that they are adopting in Amazon Web Services.

---

Policies included

• intel-aws-autoscaling-group-deny-unapproved-instance-types (docs | code)
• intel-aws-databricks-cluster-deny-unapproved-instance-types (docs | code)
• intel-aws-databricks-cluster-deny-unapproved-runtime-engines (docs | code)
• intel-aws-databricks-cluster-enforce-spark-conf (docs | code)
• intel-aws-db-instance-deny-unapproved-instance-types (docs | code)
• intel-aws-db-instance-deny-unapproved-storage-types (docs | code)
• intel-aws-db-instance-deny-unencrypted-database (docs | code)
• intel-aws-eks-node-group-deny-unapproved-instance-types (docs | code)
• intel-aws-elasticache-replication-group-deny-unapproved-instance-types (docs | code)
• intel-aws-instance-deny-unapproved-instance-types (docs | code)
• intel-aws-launch-template-deny-unapproved-instance-types (docs | code)
• intel-aws-sagemaker-endpoint-configuration-deny-unapproved-instance-types (docs | code)

---