Company
Date Published
Author
Erin Krengel
Word count
1000
Language
English
Hacker News points
None

Summary

Pulumi CrossGuard is a Policy as Code solution that enables the enforcement of custom business and security rules across organizations, allowing administrators to apply these policies universally or to specific stacks. With its open-source nature, CrossGuard supports all Pulumi users, including those with the Individual Edition, while offering advanced policy management to Enterprise customers. It allows for the creation and enforcement of policies written in TypeScript or JavaScript, but applicable to stacks in any language, thus ensuring compliance before resource creation. By empowering developers and operators to self-provision infrastructure, CrossGuard facilitates the codification of best practices, helping organizations maintain security, compliance, and cost-efficiency. The platform's flexibility is illustrated through the use of Policy Packs, which can prevent the creation of non-compliant resources, such as public-read AWS S3 buckets, thereby enhancing security and operational standards. CrossGuard's preview version is accessible to all Pulumi users, with plans to expand its policy SDKs to other languages, and feedback from users is encouraged for continued improvement.