Docs
Setup guidance before you buy.
Technical buyers should be able to see the operating model before trusting the kit.
Guardrails Kit setup
Recommended flow
Use a sandbox AWS account first. Review every plan manually. Treat agent-authored infrastructure as draft work until a human approves it.
Review the kit contents
Read the module README, IAM boundary notes, tagging standard, and Checkov policy descriptions.
Validate locally
Run Terraform validate and policy checks before any account-specific planning.
Plan in a sandbox
Use Terraform plan against a non-production account. Do not apply until reviewed.
Record owners and escalation paths
Every agent workload should have an owner, budget threshold, tags, and review contact.