OPA Auto Approve: SQS Module

[timckt]

Background

We have created and implemented the OPA Auto Approve Policy in our environment repo. Ticket here.

As part of the OPA-Based Automated User PR Approval initiative, we are expanding our auto-approve framework to support additional resources.

We have implemented a modular structure for auto-approve policies, with Kubernetes Service Pods being the first resource type validated under this framework.

SQS module will be the good candidate for next one.

Approach

We stored the OPA auto approve policy code in environment repo.

• Create new module for SQS auto approve.
• Create new test case for SQS auto approve.
• Update the main.rego to call the new module.

Which part of the user docs does this impact

Communicate changes

• post for #cloud-platform-update
• Weeknotes item
• Show the Thing/P&A All Hands/User CoP
• Announcements channel

Questions / Assumptions

Definition of done

• readme has been updated
• user docs have been updated
• another team member has reviewed
• smoke tests are green
• prepare demo for the team

Reference

How to write good user stories