Sentinel policy libraries

[iamsecb]

Hi,

We make extensive use of Sentinel policies in Vault. However, we’ve noticed a significant amount of code duplication across different policies. I’m wondering if it’s possible to create reusable libraries or modules that can be shared among multiple Sentinel policies to improve maintainability and reduce redundancy.

The documentation is unclear to me. If possible, I’d appreciate if someone could share a working example.

[AjayRedJ]

@iamsecb

However, we’ve noticed a significant amount of code duplication across different policies. I’m wondering if it’s possible to create reusable libraries or modules

We are trying out EGP and RGP and looking for simple examples and use-cases to try out. Kindly share any sample policies from your experience.

[jonathanfrappier]

@iamsecb - have you looked at the Sentinel tutorials? This collection talks about functions and modules:

What is Policy as Code with Sentinel? | Sentinel | HashiCorp Developer