CSE55 · Infrastructure as Code & policy

Policy-as-Code Tag Compliance

Write rules that fail the plan when resources lack tags or storage is public.

📶 L300⏱ 30 min🧪 Live lab

🎯 You will learn to

Write a policy rule
Fail a plan
Fix and pass

🧪 Live environment

Runs entirely in your browser: nothing is installed, no real cloud account is used and your code is never sent to our server.

Loading the lab…

✅ Steps & checkpoints

Run the plan with policy
Read the failures
Fix the resources
Pass the gate

🗺️ Policy check on a plan

The plan is exported as JSON and every resource is tested against tag and public-access rules.

The 2D diagram shows the exact flow, ports and trust boundaries. The 3D scene is a concept view of the same parts; packets travel along the same arrows.

🤔 Think about it

Why check policy at plan time, not after deploy?

Your answer (kept only on this device)

🛡️ Safety & cost

Every apply here is simulated. Always review a real plan before you apply it.

🧹 Cleanup

Run destroy in the simulator, and in real life check that state is empty.

📚 Reference documents

Official sources, checked on 5 Nov 2026. Cloud services change often; check the official page before relying on a feature. All references