This repository demonstrates how to use InSpec helps you to verify your cloud setups in AWS, Azure or GCP. Recent additions in InSpec 3 also help you to extend InSpec to test your custom in-house applications.

I wrote a couple of articles about InSpec's ability to help you implement test-driven infrastructure with Terraform:

• Google Cloud Platform support for InSpec
• Getting started with InSpec for AWS. Testing for the cloud!
• InSpec for provisioning testing: Verify Terraform setups with InSpec

This repository demonstrates how to use InSpec with provisioning tools. Recent additions to InSpec 2.0 allow us to verify not only machines, but also any infrastructure provisioned in AWS or Azure cloud. This repository is providing guidance on the use of provising tools in conjunction with InSpec.

• Terraform for AWS
• InSpec profile for GCP

The following example will provision a two-tier terraform architecture on AWS. It assumes that you have AWS credentials properly configured.

cd aws-terraform
# run terraform
terraform init
terraform apply -var 'key_name=terraform' -var 'public_key_path=/Users/chris/.ssh/id_rsa.pub'

# use terraform variables with InSpec
terraform output --json > test/verify/files/terraform.json
inspec exec test/verify -t aws://

cd gcp-example-profile
# authenticate to gpc
gcloud auth application-default login

# check that inspec can connect to gpc
inspec detect -t gcp://

# run the profile
inspec exec . -t gcp:// --attrs attributes.yml

The terraform aws example is based on their two-tier example which is also MPL-2.0 licensed.