StyraInc / opa-aws-cloudformation-hook

AWS Cloudformation Hook for OPA-powered infrastructure policy enforcement
Apache License 2.0
35 stars 5 forks source link

Separate example policies from the main (i.e. router) policy #22

Closed anderseknert closed 2 years ago

anderseknert commented 2 years ago

Users of this hook likely will want to provide their own policies rather than the examples we provide. I think we should move these to a new examples directory where we can have one subdirectory for the templates (as suggested by @tsandall elsewhere), and another for policy.

Remaining in the policy directory should only be main.rego and authz.rego, plus a subdirectory for the tests / helpers.

anderseknert commented 2 years ago

The templates directory is now moved to examples/templates. As for the policies, I think what we have now is fine. Users are likely going to pick and choose either way, and it's well documented how the router logic works, so they'll likely want to add that themselves.