FREEDOM251

Freedom251 › Compare

Side by side

Conftest vs Google Cloud Terraform Policy Validation

Both stand on infrastructure policy as code tools. Which one you can start free with, which one lets you read the code, and what each costs once you pay.

Conftest

Free plan LinuxMacWindows

Conftest provides policy-based configuration checks with a broad set of inputs and CI outputs. Teams can use its integrations, plugins, and pre-commit hooks to fit those checks into existing workflows.

Visit Conftest

Google Cloud Terraform Policy Validation

Free plan LinuxMacWindows

Google Cloud Terraform Policy Validation provides policy checks for Terraform plans and can fit into several CI/CD workflows. Its Preview status and setup requirements are worth considering before adopting it.

Visit Google Cloud Terraform Policy Validation

The facts

ConftestGoogle Cloud Terraform Policy Validation
Free planYesYes
Open sourceNot publishedNot published
Runs onLinux, Mac, WindowsLinux, Mac, Windows
Lowest paid planFree or on requestFree or on request
Plans published11
MakerNot publishedNot published
Websiteconftest.devdocs.cloud.google.com
On infrastructure policy as code tools#6 of 25#10 of 25

Conftest: what it does well

  • Free under the Apache License 2.0.
  • Accepts numerous configuration formats and input methods.
  • Offers CI-focused output formats, including JUnit and SARIF.
  • Policies and plugins can be retrieved from multiple sources.
  • Pre-commit hooks cover several policy tasks.

What to know first

  • The deprecated instrumenta/conftest image should not be used.
  • Questions and discussions are directed to the OPA Slack channel.

Google Cloud Terraform Policy Validation: what it does well

  • Free command for validating Terraform plans
  • Can warn or stop deployment before production
  • Integrates with Cloud Build, Jenkins, and GitHub Actions
  • Constraints can be reused with compatible tools

What to know first

  • Preview feature with potentially limited support
  • Requires a policy library and CLI component
  • Security Command Center validation has extra prerequisites

Alternatives to Conftest Alternatives to Google Cloud Terraform Policy Validation The whole list