Questions

The correct answers are:

A. Policy-as-code can enforce security best practices
B. You can restrict specific configurations on resources like "CIDR=0.0.0.0/0" not allowed
C. You can enforce a list of approved AWS AMIs

Explanation:

• A: Sentinel allows the enforcement of security policies in the form of code, which can help ensure compliance with best practices and security standards.
• B: You can define policies to restrict certain configurations, such as ensuring that specific CIDR blocks (like 0.0.0.0/0) are not allowed, enhancing network security.
• C: Sentinel allows you to enforce policies around specific configurations, such as ensuring only approved AWS AMIs are used in your Terraform configuration.

D: Sentinel policies are written in the Sentinel language, not HCL (HashiCorp Configuration Language).

E: Sentinel is not directly responsible for managing cloud access keys; it's focused on enforcing policies related to Terraform runs.