Policy As Code

cloud-custodianPython

A rules engine for cloud security, cost optimization, and governance using YAML policies to query, filter, and act on cloud resources.

Open Policy Administration LayerPython

A real-time administration layer for policy engines like OPA and AWS Cedar, keeping authorization data and policies in sync across microservices.

terrascanGo

A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.

CerbosGo

An open-core, language-agnostic authorization solution for implementing and managing context-aware access control policies.

ConftestGo

Write tests against structured configuration data using the Open Policy Agent Rego query language.

kclRust

A constraint-based record and functional language for writing, validating, and managing complex configurations, especially in cloud-native scenarios.