{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/17"}],"enrichment":{"capability":"terraform-compliance is a BDD-based test framework that validates Terraform infrastructure code against security and compliance policies before deployment, using human-readable Gherkin syntax to define and enforce infrastructure standards.","skillfed_tags":["infrastructure-as-code","policy-enforcement","bdd-testing"],"use_cases":["Enforce encryption requirements on cloud storage resources before they are deployed to production.","Validate that security groups and network ACLs follow your organization's least-privilege policies.","Ensure all database instances have backup and high-availability configurations defined in code.","Prevent creation of publicly accessible resources that should remain private.","Run compliance checks in CI/CD pipelines to gate infrastructure deployments.","Segregate policy ownership by storing feature files in a separate repository managed by a security team."],"what_it_does":"terraform-compliance is a test framework that applies Behaviour Driven Development principles to infrastructure-as-code validation. Instead of traditional functional testing, it focuses on negative testing\u2014ensuring your Terraform code adheres to security and compliance policies before deployment. You write policies in plain Gherkin syntax (the same language used in radish-bdd), which makes them readable to both developers and security teams. The framework parses your Terraform plan and validates it against these policies, catching violations early in your CI/CD pipeline.\n\nThe package depends on radish-bdd for feature file parsing, gitpython for repository operations, and several utilities for parsing, formatting, and caching results. It runs on multiple Python versions and operating systems, integrating easily into existing deployment pipelines or git hooks. The framework is particularly useful when you need to enforce organizational standards\u2014such as requiring S3 bucket encryption or preventing public security group rules\u2014without relying on enterprise Sentinel licensing.","worth_installing":"Yes. terraform-compliance is actively maintained, has no known vulnerabilities, low install friction, and fills a genuine gap in open-source infrastructure policy testing. It is worth installing if you need to enforce compliance or security standards on Terraform code before deployment, especially in teams where policy ownership should be separated from development."},"id":"terraform-compliance","links":{"html":"https://skillfed.io/packages/terraform-compliance","md":"https://skillfed.io/packages/terraform-compliance.md","pypi":"https://pypi.org/project/terraform-compliance/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-08","license_spdx":null,"license_treatment":"permissive","name":"terraform-compliance","python_support":"unspecified","summary":"BDD test framework for terraform"},"popularity":{"monthly_downloads":173248,"position":10315,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.15.1"}