OPA Auto Approve: SNS Module

[timckt]

Background

We have created and implemented the OPA Auto Approve Policy in our environment repo. Ticket here.

As part of the OPA-Based Automated User PR Approval initiative, we are expanding our auto-approve framework to support additional resources.

We have implemented a modular structure for auto-approve policies, with Kubernetes Service Pods being the first resource type validated under this framework.

SNS module will be the good candidate for next one.

Approach

We stored the OPA auto approve policy code in environment repo.

• Create new module for SNS resource auto approve.
• Create new test case for SNS resource auto approve.
• Update the main.rego to call the new module.