https://pulumi.com logo
s

sparse-gold-89283

10/08/2021, 1:09 AM
Is there currently a service like https://www.fugue.co/ or https://bridgecrew.io/ (IaC security/compliance scans) that support Pulumi?
l

little-cartoon-10569

10/08/2021, 1:28 AM
Are Pulumi PolicyPacks similar? Like AwsGuard?
It doesn't scan, it blocks deployments if you violate the configured rules.
s

sparse-gold-89283

10/08/2021, 1:41 AM
Same idea, just with PolicyPacks I'd have to write probably a 100 of them to get coverage for NIST/CIS for the resources we have. I see they added an OPA bridge so looking into if anyone has already done the legwork there