I'm looking at incorporating a set of Policies for...
# generalc
colossal-vr-62639
06/28/2023, 4:31 PMI'm looking at incorporating a set of Policies for our workloads on Azure and found https://kics.io/. Has anyone incorporated this into their Pulumi based systems? If so, would you mind sharing your experiences?
s
salmon-account-74572
06/28/2023, 4:41 PMI haven’t worked with it (yet, will probably take it for a spin), but it looks like it only supports Pulumi YAML.
f
fast-vr-6049
06/28/2023, 5:42 PMThis looks incredibly useful, but sadly it only having support for YAML really hampers its relevance. I'll be keeping an eye on it, though!
fast-vr-6049
06/28/2023, 5:50 PMA little side thought: rather than getting Kics to support all the languages Pulumi supports, perhaps the experimental Pulumi update plans could be leveraged instead?
s
salmon-account-74572
06/28/2023, 6:00 PMAgreed, that would be a good avenue of integration to explore
c
colossal-vr-62639
06/28/2023, 6:05 PMI'm considering seeing if I can find a way to allow it to support Pulumi's plans
colossal-vr-62639
06/28/2023, 6:05 PM@fast-vr-6049 you referring to https://www.pulumi.com/docs/concepts/update-plans/ ?
f
fast-vr-6049
06/28/2023, 6:24 PMYes! That's what I was referring to
c
colossal-vr-62639
06/30/2023, 11:31 AMThere is a slight issue with using Update plans and that is if you introduce "new" policies that affect resources that were already provisioned, you won't be able to pick up issues with those?