cloud-custodian
A rules engine for cloud security, cost optimization, and governance using YAML policies to query, filter, and act on cloud resources.
What is cloud-custodian?
Cloud Custodian (c7n) is an open-source rules engine for cloud security, cost optimization, and governance. It allows users to define YAML-based policies to query, filter, and take actions on cloud resources across AWS, Azure, and GCP, helping organizations maintain compliance and reduce waste.
Cloud engineers, DevOps teams, and security professionals managing multi-cloud environments who need automated policy enforcement for security, cost, and governance.
Developers choose Cloud Custodian for its unified multi-cloud approach, declarative YAML policy language, and serverless automation capabilities that replace custom scripts with a scalable, battle-tested framework.
Overview
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Use Cases
Best For
- Enforcing security policies like encryption and access controls across cloud resources
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
