Tag: Infrastructure Governance
HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform
Tom Smith | | Cloud Security, compliance automation, Hashicorp, HCL, HCP Terraform, infrastructure as code, Infrastructure Governance, OPA, Open Policy Agent, platform engineering, policy as code, Sentinel, Terraform, tfpolicyHashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks ...
Risk-Based Review for Infrastructure as Code Pull Requests
Naga Krishna Reddy Muppidi | | automated review systems, blast radius analysis, change approval workflow, change management, CI/CD governance, cloud infrastructure, Cloud Security, deployment risk, deployment safety, devops, devsecops, Engineering Governance, engineering productivity, gitops, IaC review, infrastructure as code, infrastructure auditing, infrastructure automation, infrastructure change tracking, infrastructure compliance, infrastructure controls, infrastructure delivery, Infrastructure Governance, infrastructure observability, infrastructure reliability, infrastructure risk scoring, infrastructure security, operational risk management, platform engineering, platform operations, platform team workflows, policy as code, production changes, production deployments, pull request review, reviewer fatigue, reviewer workflows, risk assessment, risk-based review, security review automationNot every infrastructure pull request deserves the same review path. A tag change in a development account and a network-policy change in production should not create identical reviewer load. When every change ...
The Automation Layer Wants to Own Enterprise AI
Alan Shimel | | AI agents, Automation Layer, Enterprise AI, Infrastructure Governance, Operational Trust, platform engineering, Probabilistic Systems, runtime securityOrganizations want AI systems capable of prioritizing alerts, routing workflows, coordinating across applications, initiating remediation steps, summarizing operational data and adapting dynamically based on changing context. The system is no longer following ...
