Pulumi Crossguard

Checkov

Policy-as-code for everyone. Scan cloud infrastructure configurations to find misconfigurations before they're deployed.

A static analysis tool for infrastructure as code, with limited Pulumi support.

View tool details →

Pulumi AWS Guard

A policy pack of rules to enforce AWS best practices for security, reliability, cost, and more.

Codifies best practices for AWS, allowing enforcement across Pulumi stacks.

View tool details →

Pulumi Azure Compliance Policies

Compliance-Ready Policies to validate Azure infrastructure using Pulumi's Crossguard Policy-as-Code framework.

Enforces common security and compliance policies (PCI DSS, ISO 27001, CIS) for Azure.

View tool details →

Pulumi Open Policy Agent (OPA) Integration

A bridge enabling Pulumi CrossGuard to run OPA rules.

Enforce security, compliance, and best practices using the Rego language.

View tool details →

Pulumi Snyk Integration

A Pulumi policy pack that uses the Snyk CLI to scan Docker Image resources for vulnerabilities.

Integrates Snyk's container scanning capabilities directly into the Pulumi workflow.

View tool details →

Pulumi Vault Provider

A Pulumi resource package for managing HashiCorp Vault resources.

Manage Vault resources like policies, secrets, and auth methods using Pulumi.

View tool details →

Pulumi Best Practices Pack

A foundational set of recommended governance and security controls for AWS, Azure, and Google Cloud.

A pre-built policy pack from Pulumi that enforces foundational security and governance.

View tool details →

Pulumi HITRUST CSF Policy Pack

Predefined controls that align cloud resources with HITRUST CSF requirements.

A pre-built policy pack to help enforce HITRUST compliance for AWS, Azure, and GCP.

View tool details →

Pulumi CIS Policy Pack

Enforce compliance with Center for Internet Security (CIS) Benchmarks.

A policy pack that validates cloud resources against CIS security recommendations.

View tool details →

Pulumi PCI DSS Policy Pack

Enforce Payment Card Industry Data Security Standard (PCI DSS) controls.

A policy pack that helps validate cloud infrastructure against PCI DSS requirements.

View tool details →

Pulumi ISO 27001 Policy Pack

Enforce information security controls based on the ISO/IEC 27001 standard.

A policy pack to help validate cloud infrastructure against ISO 27001 controls.

View tool details →

Pulumi NIST Policy Pack

Enforce compliance with the National Institute of Standards and Technology (NIST) frameworks.

A pre-built policy pack to validate cloud resources against NIST security standards.

View tool details →

Pulumi Kubernetes Guard

A policy pack of rules to enforce Kubernetes best practices.

Codifies best practices for Kubernetes, allowing enforcement across Pulumi stacks.

View tool details →

Pulumi GCP Guard

A policy pack of rules to enforce Google Cloud Platform (GCP) best practices.

Codifies best practices for GCP, allowing enforcement across Pulumi stacks.

View tool details →

Pulumi CloudFormation Guard Integration

Use AWS CloudFormation Guard to write policies for Pulumi stacks.

An integration that allows CFN Guard rules to be applied to Pulumi deployments.

View tool details →

Pulumi CloudTrail Integration Policy

Manage AWS CloudTrail as code to enforce logging policies.

Use Pulumi to ensure CloudTrail is enabled and properly configured.

View tool details →

Pulumi AWS Config Integration Policy

Manage AWS Config as code to enforce resource compliance.

Use Pulumi to deploy and manage AWS Config rules for continuous auditing.

View tool details →

Pulumi Azure Policy Integration

Manage Azure Policy as code to enforce organizational standards.

Use Pulumi to define and assign Azure Policy for post-deployment governance.

View tool details →

Pulumi GitHub Provider for Policy

Manage GitHub repository policies as code.

Use Pulumi to enforce policies on GitHub repositories, such as branch protection rules.

View tool details →

Pulumi Okta Provider for Policy

Manage Okta identity and access policies as code.

Use Pulumi to enforce identity policies for users, groups, and applications in Okta.

View tool details →

Pulumi Datadog Provider for Policy

Manage Datadog monitoring and security policies as code.

Use Pulumi to enforce monitoring policies by managing Datadog resources.

View tool details →

Pulumi Cloudflare Provider for Policy

Manage Cloudflare security and performance policies as code.

Use Pulumi to enforce policies on DNS, WAF, and Access in Cloudflare.

View tool details →

Pulumi Snowflake Provider for Policy

Manage Snowflake data warehouse policies as code.

Use Pulumi to enforce policies on Snowflake roles, users, and grants.

View tool details →

Pulumi Artifactory Provider for Policy

Manage JFrog Artifactory policies as code.

Use Pulumi to enforce policies on repositories, permissions, and users in Artifactory.

View tool details →