When does Sentinel enforce policy logic during a Terraform Cloud run?

The correct answer is C. Before the apply phase. In a Terraform Cloud run workflow, the sequence is: plan → Sentinel policy check → apply. Sentinel policies are evaluated after the plan phase produces a plan output, but before the apply phase begins. This placement is intentional - it allows Sentinel to inspect the planned chan

Submitted by katya_ua· Apr 18, 2026Understand Terraform Cloud and Enterprise Capabilities

Question

When does Sentinel enforce policy logic during a Terraform Cloud run?

Options

ABefore the plan phase
BDuring the plan phase
CBefore the apply phase
DAfter the apply phase

How the community answered

(40 responses)

B
3% (1)
C
93% (37)
D
5% (2)

Explanation

In a Terraform Cloud run workflow, the sequence is: plan → Sentinel policy check → apply. Sentinel policies are evaluated after the plan phase produces a plan output, but before the apply phase begins. This placement is intentional - it allows Sentinel to inspect the planned changes and either pass, warn, or hard-fail before any real infrastructure is modified. Choosing 'before the apply phase' correctly identifies this checkpoint in the workflow.

Topics

#Sentinel#Terraform Cloud#Policy as Code#Run Workflow

Community Discussion

No community discussion yet for this question.

Full TERRAFORM-ASSOCIATE-004 Practice