SRE can only Unlock

Terrateam Configuration

Terrateam behavior can be configured via a config.yml. This file is located in a directory named .terrateam at the root of your Terraform repository: .terrateam/config.yml.

See Configuration documentation for details.

Only members of the SRE team can trigger an Unlock operation.

access_control:
  policies:
    - tag_query: ''
      unlock: ['team:sre']

SRE bypass Apply Requirements Extra Arguments