A package based on a set of rules or benchmarks used to guarantee compliance across the existing infrastructure of your cloud provider.
To start using Policy Packs with your infrastructure you have to install Cloud Graph CLI first.
Install and execute policy packs is fast and simple. We follow the following convention for all our packages @cloudgraph/policy-pack-[benchmark]. We can start using policies just passing the name of the benchmark as it shows in the following example.
# Adding a policy pack will include it into the CG configuration file.
cg policy add aws-cis-1.2.0
cg policy add gcp-cis-1.2.0
cg policy add azure-cis-1.3.1
# Perform a scan for the providers to evaluate. It will execute all the configured policies.
cg scan aws gcp azure