When does Sentinel enforce policy logic during a Terraform Cloud run?
When does Sentinel enforce policy logic during a Terraform Cloud run?
Sentinel enforces policy logic during a Terraform Cloud run before the apply phase. This ensures that any policies are checked and validated after the infrastructure plan is generated but before any changes are actually applied, helping to prevent potentially destructive or non-compliant actions.
https://developer.hashicorp.com/sentinel/docs/terraform#:~:text=the%20sentinel%20integration%20with%20terraform%20runs%20within%20terraform%20enterprise%20after%20a%20terraform%20plan%20and%20before%20a%20terraform%20apply