The safeguards map / 3.7 Admission and owner settings
Cloud Custodian
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A rules engine that runs the owner's YAML policies against public cloud accounts and resources, filtering them and taking actions, and can also check infrastructure as code.
Where it sits
3.7 Admission and owner settings (primary): Runs policies the owner writes in YAML against cloud resources, using each provider's serverless capabilities to apply them in real time, built from filters and actions.
Cloud Custodian, also known as c7n, is a rules engine for managing public cloud accounts and resources.
captured
It integrates with the cloud native serverless capabilities of each provider to provide for real time enforcement of policies
captured
Custodian policies are written in simple YAML configuration files
captured
1.1 Code and dependencies: Runs the same policies against infrastructure as code assets to give feedback before deployment.
Custodian also supports running policies on infrastructure as code assets
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtimein CI
- Policy comes from
- owner-entered settings
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.