diff --git a/policies.md b/policies.md index f717ec3..19ee707 100644 --- a/policies.md +++ b/policies.md @@ -2,46 +2,23 @@ Intel Logo

-# Intel® Cloud Optimization Modules for Terraform +# Intel® Optimized Cloud Modules for Terraform -© Copyright 2022, Intel Corporation +© Copyright 2024, Intel Corporation -## GCP VM module +## HashiCorp Sentinel Policies -This file documents the HashiCorp Sentinel policies that apply to this module +What are Sentinel Policies? -## Policy 1 +HashiCorp Sentinel is a policy as code framework that can be used to enforce policies and standards across an organization's infrastructure. It allows organizations to define rules for their infrastructure using a high-level language, and integrates with a variety of HashiCorp tools, including Terraform and Vault. Sentinel policies are defined using the Sentinel language, and can be used to enforce rules such as compliance requirements, security best practices, and cost optimization. Sentinel policies can be implemented at different stages of the infrastructure development lifecycle, deployment, and runtime. -Description: The configured "machine_type" should be an Intel Xeon 3rd Generation(code-named Ice Lake) Scalable processors or an Intel Xeon 4th Generation(code-named Sapphire Rapids) Scalable processors. +## Intel's Sentinel Policy Structure -Resource type: google_compute_instance +Reference the `intel-policy-library` [README.md](https://github.com/intel/intel-policy-library/blob/main/README.md#getting-started) for details on how to get started using our policies. -Parameter: machine_type +Intel® provides a list of `optimal` instance types per cloud resource, selected to deliver the best possible performance, security, and cost-efficiency for your cloud workloads. What sets this library apart is its dynamic nature; it is designed to automatically update, informing developers whenever more suitable hardware becomes available within their cloud environment, enabling them to make timely and informed decisions. -Allowed Types - -- **General Purpose:** N2-Standard: n2-standard-2, n2-standard-4, n2-standard-8, n2-standard-16, n2-standard-32, n2-standard-48, n2-standard-64, n2-standard-80, n2-standard-96, n2-standard-128 -- **General Purpose:** N2-HighMem: n2-highmem-2, n2-highmem-4, n2-highmem-8, n2-highmem-16, n2-highmem-32, n2-highmem-48, n2-highmem-64, n2-highmem-80, n2-highmem-96, n2-highmem-128 -- **General Purpose:** N2-HighCPU: n2-highcpu-2, n2-highcpu-4, n2-highcpu-8, n2-highcpu-16, n2-highcpu-32, n2-highcpu-48, n2-highcpu-64, n2-highcpu-80, n2-highcpu-96 -- **General Purpose:** C3-Standard: -c3-standard-4, c3-standard-8, c3-standard-22, c3-standard-44, c3-standard-88, c3-standard-176 -- **General Purpose with Local SSD:** C3-Standard-LSSD: c3-standard-4-lssd, c3-standard-8-lssd, c3-standard-22-lssd, c3-standard-44-lssd, c3-standard-88-lssd, c3-standard-176-lssd -- **General Purpose:** C3-HighCPU: c3-highcpu-4, c3-highcpu-8, c3-highcpu-22, c3-highcpu-44, c3-highcpu-88, c3-highcpu-176 -- **General Purpose:** c3-HighMem: c3-highmem-4, c3-highmem-8, c3-highmem-22, c3-highmem-44, c3-highmem-88, c3-highmem-176 -- **Memory Optimized:** m3-UltraMem: m3-ultramem-32, m3-ultramem-64, m3-ultramem-128, m3-megamem-64, m3-megamem-128 -- **Compute Optimized:** h3-Standard: h3-standard-88 - -## Policy 2 - -Description: This policy will be based on the google_compute_instance resource type and the minimum cpu platform (min_cpu_platform) parameter. This policy will allow "Intel Ice Lake", "Intel Sapphire Rapids" CPU platforms. - -Resource type: google_compute_instance - -Parameter: min_cpu_platform - -Allowed Types - -- Intel Ice Lake, Intel Sapphire Rapids +This library also contains `recommended` instance types for AI and Confidential Computing workloads. For more information regarding Intel's AI and Confidential Computing capabilities and policies see the Intel® Xeon® Scalable Processors and Intel® Advanced Matrix Extensions (AMX) and Intel® Xeon® Scalable Processors and Confidential Computing sections in the [intel-policy-library](https://github.com/intel/intel-policy-library) ## Links