Policy: AWS > IAM > Stack [Native] > Version

The OpenTofu (open source Terraform) version to use for this stack. Specify an npm-style semver string to determine which version of the OpenTofu container Guardrails will use to run this stack.

A Guardrails Stack [Native] is a set of resources configured by Guardrails, as specified via HCL source. Stacks are responsible for the creation and deletion of multiple resources.

Resource Types

This policy targets the following resource types:

AWS > Account

Primary Policy

This policy is used with the following primary policy:

AWS > IAM > Stack [Native]

Controls

Policy Specification

Schema Type	`string`
Default template	`{% if $.opentofuVersion.items \| length > 0 %}"{{ $.opentofuVersion.items[0].value }}"{% else %}"1.8.*"{% endif %}`
Default template input	`\| { opentofuVersion: policyValues(filter:"policyTypeLevel:self policyTypeId:'tmod:@turbot/turbot#/policy/types/stackNativeVersion'") { items { value } } }`

Schema Type

string

Default template

{% if $.opentofuVersion.items | length > 0 %}"{{ $.opentofuVersion.items[0].value }}"{% else %}"1.8.*"{% endif %}

Default template input

|
  {
    opentofuVersion: policyValues(filter:"policyTypeLevel:self policyTypeId:'tmod:@turbot/turbot#/policy/types/stackNativeVersion'") {
      items {
        value
      }
    }
  }

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/configured

Policy Type URI

tmod:@turbot/aws-iam#/policy/types/iamStackNativeVersion

GraphQL

query policyType(id: "tmod:@turbot/aws-iam#/policy/types/iamStackNativeVersion") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/iamStackNativeVersion'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/iamStackNativeVersion'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-iam#/policy/types/iamStackNativeVersion"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-iam#/policy/types/iamStackNativeVersion"