Glossary: Terraform
Writing team rules, such as "no public buckets", as checks that every change must pass.
SentinelOpen Policy Agent (OPA)