Compliance as Code

Test the desired state

Verify the current desired state of your apps and infrastructure according to the code you write.

Human-readable code

Reduce friction by writing tests that are easy to understand by anyone.

Extensible

Create custom resources with ease and share them easily with others.

describe file('/etc/myapp.conf') do
  it { should exist }
  its('mode') { should cmp 0644 }
end

describe apache_conf do
  its('Listen') { should cmp 8080 }
end

describe port(8080) do
  it { should be_listening }
end

Test AWS and Azure configuration

Verify all necessary settings of your favorite public cloud providers.

Test provisioners

Chef InSpec can be used in combination with Cloudformation, Azure resource manager templates and Terraform.

Verify security configuration

Ensure that your cloud deployments are not open to malicious attacks due to misconfiguration.

describe aws_s3_bucket(bucket_name: 'my_secret_files') do
  it { should exist }
  it { should_not be_public }
end

describe aws_iam_user(username: 'test_user') do
  it { should have_mfa_enabled }
  it { should_not have_console_password }
end