You're basically describing Sentinel for Terraform (https://www.hashicorp.com/sentinel/ https://www.hashicorp.com/sentinel/) or Datree for Kubernetes (https://w

You're basically describing Sentinel for Terraform (https://www.hashicorp.com/sentinel/ https://www.hashicorp.com/sentinel/) or Datree for Kubernetes (https://www.datree.io https://www.datree.io). There are also a bunch of tools popping up in this space that focus on catching security issues rather than misconfigurations.