Skill

policy-as-code-generator

Generates executable compliance policies from natural language inputs in OPA Rego, AWS Config Rules (Python), Sentinel, Terraform, or Checkov formats. Useful for IaC security and CI/CD governance.

Terraform

AWS

Install

npx claudepluginhub grcengclub/claude-grc-engineering --plugin grc-engineer

Tool Access

This skill is limited to using the following tools:

BashReadGlobWriteEdit

Preview

Converts natural language compliance requirements into executable policy code. Generates OPA Rego, AWS Config Rules, Sentinel policies, or Terraform modules.

SKILL.md

Similar Skills

ui-ux-pro-max

Provides UI/UX resources: 50+ styles, color palettes, font pairings, guidelines, charts for web/mobile across React, Next.js, Vue, Svelte, Tailwind, React Native, Flutter. Aids planning, building, reviewing interfaces.

ui-ux-pro-max

57.6k

context7-mcp

Fetches up-to-date documentation from Context7 for libraries and frameworks like React, Next.js, Prisma. Use for setup questions, API references, and code examples.

context7-plugin

51.8k

market-sizing-analysis

2 files

Calculates TAM/SAM/SOM using top-down, bottom-up, and value theory methodologies for market sizing, revenue estimation, and startup validation.

startup-business-analyst

32.9k

Stats

Parent Repo Stars21

Parent Repo Forks4

Last CommitApr 13, 2026

Actions

View Source View Plugin View on GitHub View README

Policy-as-Code Generator

Converts natural language compliance requirements into executable policy code. Generates OPA Rego, AWS Config Rules, Sentinel policies, or Terraform modules.

Quick Commands

Generate OPA Rego policy:

node scripts/generate-policy.js "Ensure no S3 buckets are public and all must have a 'Department' tag" rego

Generate AWS Config Rule:

node scripts/generate-policy.js "All EC2 instances must have encryption enabled" aws-config

Generate Sentinel policy:

node scripts/generate-policy.js "Terraform plans must not create resources without required tags" sentinel

Supported Output Formats

rego - Open Policy Agent (OPA) Rego language
sentinel - HashiCorp Sentinel policy language
aws-config - AWS Config Rule (Python/Lambda)
terraform - Terraform policy module
checkov - Checkov YAML policy

Example Inputs

"Ensure no S3 buckets are public and all must have a 'Department' tag"
"All EC2 instances must have encryption enabled and be in a VPC"
"Terraform plans must not create resources without required tags"
"Kubernetes pods must not run as root user"
"All databases must have automated backups enabled"

Output Structure

Generated policies include:

Policy definition with clear logic
Test cases/examples
Documentation comments
Integration instructions for CI/CD

Prerequisites

Natural language requirement description
Optional: Output format (defaults to rego)