--- title: HashiCorp Introduces tfpolicy, a Native Policy Framework... description: HashiCorp has launched tfpolicy in public beta, a native policy-as-code framework built directly into Terraform that lets platform teams write governance rules... canonical: https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform | daily.dev og:description: HashiCorp has launched tfpolicy in public beta, a native policy-as-code framework built directly into Terraform that lets platform teams write governance rules... og:url: https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk og:image: https://api.daily.dev/og/posts/UFEutIhUk.png og:image:alt: HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform **[DevOps.com](https://daily.dev/sources/devops)** · 5 min read · 15 upvotes · 0 comments ## Summary HashiCorp has launched tfpolicy in public beta, a native policy-as-code framework built directly into Terraform that lets platform teams write governance rules in HCL — the same language used to define infrastructure. Unlike Sentinel or OPA, tfpolicy eliminates the need for a separate policy language or toolchain. Key capabilities include evaluating resource relationships, pulling external data at evaluation time, blocking unapproved providers and modules, and running post-deployment checks against live infrastructure rather than only the planned state. HashiCorp continues to support Sentinel and OPA, but tfpolicy is positioned as a lower-friction option for teams already standardized on Terraform, including AI-assisted workflows for writing and converting policies. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is tfpolicy in Terraform and how is it different from Sentinel or OPA? tfpolicy is HashiCorp's new policy-as-code framework built directly into Terraform, letting teams write governance rules in HCL instead of a separate policy language. Unlike Sentinel or Open Policy Agent, which require a second language and toolchain, tfpolicy works within Terraform's existing provider ecosystem, evaluating resource relationships, external data, and even live infrastructure after deployment. _Track how Terraform governance tooling evolves as teams weigh tfpolicy against existing setups on daily.dev._ ### Does tfpolicy replace HashiCorp Sentinel or Open Policy Agent for Terraform? No, tfpolicy does not replace Sentinel or OPA; HashiCorp continues supporting both. It instead offers a more integrated alternative for teams already standardized on Terraform, removing the need to learn a second policy language, though an agent skill is available to help convert existing Sentinel policies to tfpolicy. _Compare policy engine options for Terraform pipelines as they evolve, tracked on daily.dev._ ### Can Terraform policies check infrastructure state after deployment, not just the plan? Yes, tfpolicy supports post-deployment evaluation, checking policies against actual provisioned infrastructure rather than only the planned state. This catches issues that only appear once a resource is live, such as provider-generated ARNs or identifiers, extending governance from a pre-apply gate into a continuous property of the deployment lifecycle. _Follow lifecycle-aware infrastructure governance approaches like this one on daily.dev._ ## Similar posts on daily.dev - [Terraform Introduces tfpolicy, an HCL-based Policy-as-Code Framework](https://daily.dev/posts/terraform-introduces-tfpolicy-an-hcl-based-policy-as-code-framework-pckwd72yv) · InfoQ · 1 upvotes · 0 comments - [Terraform Compliance and Governance Guide](https://daily.dev/posts/terraform-compliance-and-governance-guide-xfo3gbkpo) · Spacelift · 1 upvotes · 0 comments - [How to Govern AI-Generated Infrastructure with Policy as Code and OPA \[Full Handbook\]](https://daily.dev/posts/how-to-govern-ai-generated-infrastructure-with-policy-as-code-and-opa-full-handbook--cgwuxyobm) · freeCodeCamp · 1 upvotes · 0 comments --- Tags: [#terraform](https://daily.dev/tags/terraform), [#iac](https://daily.dev/tags/iac), [#hashicorp](https://daily.dev/tags/hashicorp), [#policy-as-code](https://daily.dev/tags/policy-as-code) [View this post on daily.dev](https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform","url":"https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk"},"datePublished":"2026-07-20T08:20:05.447Z","dateModified":"2026-09-14T08:02:32.466Z","description":"HashiCorp has launched tfpolicy in public beta, a native policy-as-code framework built directly into Terraform that lets platform teams write governance rules...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ab8561679e62e4f6f27cd27765334d43?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ab8561679e62e4f6f27cd27765334d43?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"DevOps.com","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DevOps.com","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/db8f2265cff0416c878c6e7e92bb8715","url":"https://daily.dev/sources/devops"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":15},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"terraform,iac,hashicorp,policy-as-code","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DevOps.com","item":"https://daily.dev/sources/devops"},{"@type":"ListItem","position":3,"name":"HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/hashicorp-introduces-tfpolicy-a-native-policy-framework-for-terraform-ufeutihuk#faq","mainEntity":[{"@type":"Question","name":"What is tfpolicy in Terraform and how is it different from Sentinel or OPA?","acceptedAnswer":{"@type":"Answer","text":"tfpolicy is HashiCorp's new policy-as-code framework built directly into Terraform, letting teams write governance rules in HCL instead of a separate policy language. Unlike Sentinel or Open Policy Agent, which require a second language and toolchain, tfpolicy works within Terraform's existing provider ecosystem, evaluating resource relationships, external data, and even live infrastructure after deployment. Track how Terraform governance tooling evolves as teams weigh tfpolicy against existing setups on daily.dev."}},{"@type":"Question","name":"Does tfpolicy replace HashiCorp Sentinel or Open Policy Agent for Terraform?","acceptedAnswer":{"@type":"Answer","text":"No, tfpolicy does not replace Sentinel or OPA; HashiCorp continues supporting both. It instead offers a more integrated alternative for teams already standardized on Terraform, removing the need to learn a second policy language, though an agent skill is available to help convert existing Sentinel policies to tfpolicy. Compare policy engine options for Terraform pipelines as they evolve, tracked on daily.dev."}},{"@type":"Question","name":"Can Terraform policies check infrastructure state after deployment, not just the plan?","acceptedAnswer":{"@type":"Answer","text":"Yes, tfpolicy supports post-deployment evaluation, checking policies against actual provisioned infrastructure rather than only the planned state. This catches issues that only appear once a resource is live, such as provider-generated ARNs or identifiers, extending governance from a pre-apply gate into a continuous property of the deployment lifecycle. Follow lifecycle-aware infrastructure governance approaches like this one on daily.dev."}}]} ```