added opa policy to infracost

morethancertified · Oct 18, 2024 · af35310 · af35310
1 parent 3f96233
commit af35310
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 1 deletion.
diff --git a/.github/workflows/infracost.yml b/.github/workflows/infracost.yml
@@ -52,5 +52,6 @@ jobs:
                                      --github-token=${{ github.token }} \
                                      --pull-request=${{ github.event.pull_request.number }} \
                                      --behavior=update
+                                     --policy-path cost.rego
 
   
diff --git a/policies/cost.rego b/policies/cost.rego
@@ -0,0 +1,17 @@
+package infracost 
+
+deny[out] {
+  # maxDiff defines the threshold that you require the cost estimate to be below
+  maxDiff = 10.0
+
+  msg := sprintf(
+    "Total monthly cost diff must be less than $%.2f (actual diff is $%.2f)",
+    [maxDiff, to_number(input.diffTotalMonthlyCost)],
+  )
+
+  out := {
+    # the msg you want to display in your PR comment, must be a string
+    "msg": msg,
+    "failed": to_number(input.diffTotalMonthlyCost) >= maxDiff
+  }
+}
diff --git a/terraform/terraform.tfvars b/terraform/terraform.tfvars
@@ -1,2 +1,2 @@
 region        = "us-east-1"
-instance_type = "t3.small"
+instance_type = "t3.large"