The correct answers are:
A. Policy-as-code can enforce security best practices
B. You can restrict specific configurations on resources like "CIDR=0.0.0.0/0" not allowed
C. You can enforce a list of approved AWS AMIs
0.0.0.0/0
) are not allowed, enhancing network security.D: Sentinel policies are written in the Sentinel language, not HCL (HashiCorp Configuration Language).
E: Sentinel is not directly responsible for managing cloud access keys; it's focused on enforcing policies related to Terraform runs.
Answered By