Home/Templates/Check every resource against your rules, all the time
Check every resource against your rules, all the time
Continuous evaluation that flags a resource the moment it stops matching the standard.
Terraform
Why bother
A yearly assessment is out of date the week after it is signed. This runs on every change and shows what drifted, with a date on it.
How you know it worked
Create something that breaks a rule. It should show up as failing within one cycle.
Not written yet
No code exists for this one. It is listed so the gap shows on the coverage table. When it is written, each platform will use:
| Platform | Service |
|---|---|
| AWS | AWS Config with a conformance pack |
| Azure | Azure Policy compliance with automatic remediation |
| Google Cloud | Security Command Center posture |
| Oracle Cloud | Cloud Guard detector recipe |