fleetworks / warden / features
Features
Everything Warden does today, one page per feature, with the facts that apply.
- 01
Workspace records
List, create and update the Terraform Cloud workspaces your organization owns, each mapped to a service, an AWS account and a repo.
- 02
Org-scoped access
Every read is limited to the caller’s organization; roles and a chmod-style Perm mode decide who may change what.
- 03
Deterministic config Review
A fixed rule set checks a stored workspace, PAT or webhook endpoint and reports findings with a severity and a stable rule id.
- 04
Scoped API tokens
Machine callers use wl_ PATs that carry an explicit scope list and an optional pin to one resource.
- 05
Signed webhooks
Workspace events go to your HTTPS endpoints, signed with HMAC-SHA256 and retried with exponential backoff.
- 06
Public search and reads
A small unauthenticated API returns only records opened to everyone, and only their public projection.
- 07
VCS tenant catalog
Warden keeps a read-only copy of the Yellow Pages tenant catalog, so a workspace can only name a known VCS tenant.
- 08
Mobile companion and push
An Expo app to browse workspaces and the account view, with push notifications to registered devices.
- 09
Reports and blocks
Users can report a workspace or another user and block users; org admins work through the report queue.
Bring your Terraform Cloud footprint into one place
Sign in with your Fleetworks account. An org admin grants your role, and your organization’s workspaces are there.