This message was deleted.
# atlantis-communitys
Slackbot
10/30/2023, 12:13 PMThis message was deleted.
p
PePe Amengual
10/30/2023, 4:49 PMAtlantis has support for conftest OPA policies
PePe Amengual
10/30/2023, 4:49 PMand you can run those as a pre_workflow_hook
PePe Amengual
10/30/2023, 4:49 PMyou can run other tools like checkov and such too
l
Luiz Silva
10/30/2023, 4:57 PMThanks for the answer PePe. Do you know if it’s possible to check * actions in policies with OPA Policies, to avoid those sqs:* or s3:*?
Luiz Silva
10/30/2023, 4:57 PMOr I need other tool to do all the validations?
p
PePe Amengual
10/30/2023, 5:02 PMI believe is possible
l
Luiz Silva
10/30/2023, 5:02 PMOther question is, I noticed that the policies configuration is in the atlantis.yaml file, in my scenario I’m using atlantis-terragrunt, can I set up the policies in my repos.yaml?
Luiz Silva
10/30/2023, 9:44 PMAnother question @PePe Amengual, how can I block the atlantis plan using the checkov?
p
PePe Amengual
10/30/2023, 9:46 PMpre_workflow_hooks run before plan/apply/init
PePe Amengual
10/30/2023, 9:46 PMif you run checkov there it will fail any other command