15Design the CI checks for a Terraform repository. What runs at each stage, and what can each check never catch?▼hardNewGitLabAtlassianNetflix○ sign inA green plan is evidence, not proof. Build the pyramid: lint in seconds, policy on every PR, real-cloud verification only where shared modules and money justify the burn.Open full answer →
20Plans get scanned by policy-as-code before merge. Which rules earn a hard block, and who can waive one?▼mediumNewJPMorgan ChaseGoldman SachsCloudflare○ sign inScan plan JSON on every pull request, run new rules advisory for two weeks, and block only what is law. Waivers live in version control with an owner and an expiry date, or the gate becomes noise within a quarter.Open full answer →
16Audit season starts in eight weeks. How do you turn compliance from a document scramble into code?▼hardNewJPMorgan ChaseGoldman SachsSalesforce○ sign inThe reframe that scores: many controls contain machine-checkable assertions; others require human evidence. Guardrails prevent, gates stop pipelines, drift detection watches live state, and evidence falls out as a byproduct.Open full answer →
