Loading...
Loading...
lattice/policy-engine
Runtime policy enforcement and authorization rules for AI agents
module "policy-engine" {
source = "registry.latticeruntime.com/lattice/policy-engine/lattice"
version = "1.0.0"
# Configure module inputs
sidecar_id = lattice_agent.main.id
}This module configures runtime policy enforcement for AI agents in Lattice Runtime.
module "policy-engine" {
source = "registry.latticeruntime.com/lattice/policy-engine/lattice"
version = "1.0.0"
sidecar_id = lattice_agent.main.id
# Define policies
policies = [
{
name = "api-rate-limit"
effect = "allow"
actions = ["api:*"]
conditions = {
rate_limit = "100/minute"
}
},
{
name = "deny-destructive"
effect = "deny"
actions = ["system:delete", "system:shutdown"]
}
]
}
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
sidecar_id |
The ID of the Lattice agent | string |
- | yes |
policies |
List of policy definitions | list(object) |
[] |
no |
default_effect |
Default policy effect (allow/deny) | string |
"deny" |
no |
enable_audit |
Enable audit logging for policy decisions | bool |
true |
no |
audit_retention_days |
Number of days to retain audit logs | number |
30 |
no |
| Name | Description |
|---|---|
policy_endpoint |
The policy evaluation endpoint |
audit_endpoint |
The audit log endpoint |
Add to your template:
source = "registry.latticeruntime.com/lattice/policy-engine/lattice"