Enforce policy as code for HashiCorp products

Install
Documentation

What is Sentinel?

Sentinel is a policy as code tool that lets you control what users of HashiCorp products are allowed to do. It enforces policies proactively, preventing end users from deploying changes that are not allowed.

Learn more

Getting Started

Install the Sentinel CLI. Then write and run your first example Sentinel policies.

Quick Start

Language Documentation

Use Cases

Infrastructure
Use Terraform Cloud with Sentinel to check that infrastructure will comply with policies.
Security
Use Vault with Sentinel to control who can access secrets based on their role or the endpoint.
Applications
Use Nomad with Sentinel to control jobs based on driver or other attributes of the job object.

Playground

Guided quick start
Read through guided language examples with an embedded, runnable policy snippets.
Sentinel playground
Write and test policies in a free, hosted sandbox. Upload mock data to write policies against, or customize the provided example, which checks that an S3 bucket has a private ACL.