17Design the CI checks for a Terraform repository. What runs at each stage, and what can each check never catch?▼hardGitLabAtlassianNetflixunlockedA green plan is evidence, not proof. Build the pyramid: lint in seconds, policy on every PR, real-cloud verification only where shared modules and money justify the burn.Open full answer →
22Plans get scanned by policy-as-code before merge. Which rules earn a hard block, and who can waive one?▼mediumJPMorgan ChaseGoldman SachsCloudflare○ sign inScan plan JSON on every pull request, run new rules advisory for two weeks, and block only what is law. Waivers live in version control with an owner and an expiry date, or the gate becomes noise within a quarter.Open full answer →
19Audit season starts in eight weeks. How do you turn compliance from a document scramble into code?▼hardJPMorgan ChaseGoldman SachsSalesforce○ sign inThe reframe that scores: many controls contain machine-checkable assertions; others require human evidence. Guardrails prevent, gates stop pipelines, drift detection watches live state, and evidence falls out as a byproduct.Open full answer →
