Terraform Policy GA and Developer Portal Public Preview Usher in Governed Self-Service for the AI Era

HashiCorp has announced significant advancements in Terraform, with the general availability of Terraform Policy and the public preview of the Terraform Developer Portal. These releases are designed to facilitate governed self-service infrastructure operations, particularly in an environment increasingly influenced by AI agents. Terraform Policy, now generally available, introduces a declarative, HCL-based policy-as-code framework directly into Terraform, allowing organizations to author and enforce policies natively. Concurrently, the Terraform Developer Portal, in public preview, extends HCP Terraform to enable developers and AI agents to consume approved infrastructure patterns through familiar interfaces. This matters immensely to practitioners because it directly addresses the growing need for robust governance and streamlined self-service in complex cloud environments. As infrastructure scales and AI agents take on more operational tasks, the risk of misconfiguration, compliance violations, and security breaches increases. By embedding policy enforcement within Terraform itself, organizations can ensure that all infrastructure deployments adhere to predefined standards from the outset, rather than relying on post-provisioning audits. The Developer Portal, on the other hand, empowers development teams and AI agents to provision resources quickly and safely, reducing bottlenecks and freeing up platform engineering teams to focus on higher-value tasks. This shift is critical for maintaining agility while simultaneously strengthening security and compliance postures. These developments fit squarely within the broader trend of platform engineering and the increasing adoption of AI in IT operations. The move towards "agentic infrastructure" – where AI agents are active participants in infrastructure delivery and operations – necessitates a re-evaluation of traditional infrastructure management. Organizations are seeking ways to provide trusted foundations and governed workflows that allow both humans and AI to operate safely at scale. The Terraform Policy and Developer Portal directly contribute to this by providing the tools to define, enforce, and consume infrastructure patterns in a controlled manner. This aligns with the industry's push for GitOps, where infrastructure changes are managed through version-controlled code, and policy-as-code, where governance rules are also codified and automated. The deprecation of CDK for Terraform in December 2025, with HashiCorp's advice to convert back to HCL, further underscores the company's commitment to its native HCL for defining infrastructure and policies. In practice, this means platform teams should prioritize adopting Terraform Policy to codify their organizational standards and guardrails. They should also explore the Developer Portal to create a curated catalog of approved infrastructure patterns, making it easier for developers and AI agents to provision resources without direct intervention. This will require an investment in defining clear policies and creating well-structured modules. Practitioners should also be aware of the enhanced search capabilities with Terraform policy, which can help discover unmanaged infrastructure and evaluate its compliance before importing it into Terraform management. This integrated workflow can significantly reduce the technical debt associated with shadow IT and unmanaged resources, ultimately leading to a more secure, compliant, and efficient infrastructure landscape.