TechPrufer
Get started
Confluent
Confluent logoConfluent · Feature trail

Policy-as-Code for Terraform

3 posts · Jul 2022 – May 2023

What this trail covers

This feature thread tracks the evolution of integrating policy-as-code with Confluent's Terraform provider, enabling self-service management of Confluent resources with automated enforcement of security, compliance, and auditing requirements. This release introduces the Confluent Terraform provider, allowing infrastructure to be managed as code through GitOps integration. It also enhances network management by treating Confluent Cloud networks as first-class resources, provisionable via REST APIs and Terraform, with granular access control for network administrators. The connector portfolio has expanded to 70 fully managed connectors, including new source connectors for GCS, S3, and Azure Cosmos DB. Audit logs now include user login monitoring to identify potential breaches. Cluster Linking is simplified with flexible topic naming and a new GUI for easier geo-replication and data movement. Zone selection for networks on AWS and Google Cloud is now available for enhanced high-availability.

All Confluent trails
  1. Self-Service GitOps for Policy-as-Code Systems in Confluent CloudThis post introduces the integration of policy-as-code with Confluent's Terraform provider, enabling self-service management of Confluent resources with automated enforcement of security, compliance, and auditing requirements. It details how policy-as-code is applied during the Terraform plan phase using HashiCorp Sentinel, with examples of policies for cloud provider and region restrictions, naming conventions, and RBAC role assignments. A Confluent Policy Library is provided to help users adopt these practices.
  2. Confluent Terraform Provider (Now Generally Available)This post announces the general availability of the Confluent Terraform Provider, built in partnership with HashiCorp. It details the resources and data sources available for managing Confluent Cloud infrastructure as code, including API keys, Kafka clusters, topics, connectors, and RBAC. The post provides a getting started guide with prerequisites, steps for creating a Cloud API Key and Service Account, setting up Terraform configuration, and testing the deployment. It emphasizes reducing complexity and risk, increasing developer autonomy, and integrating Confluent within existing cloud workflows.
  3. Terraform Provider & Network Management | Confluent's Q3 '22 LaunchIntroduces the Confluent Terraform provider, enabling infrastructure as code for Confluent Cloud resources including Kafka clusters, private networks, connectors, and RBAC. Enhances network management by treating networks as first-class resources with REST APIs and Terraform support, and introduces a NetworkAdmin role. Expands the managed connector portfolio to 70, adding new source connectors for GCS, S3, and Azure Cosmos DB. Adds user login monitoring to audit logs for security. Simplifies Cluster Linking with flexible topic naming and a new GUI. Introduces custom zone selection for networks on AWS and Google Cloud.