Generic policy engine
Policy enginepolicy-engine
Vendor-neutral policy engine. Use when the real product is not in the catalogue; every rule for this kind still applies.
- Provider
- default
- Kind
- Policy engine
- Category
- Operations
- Official docs
- not recorded
- Generic?
- Vendor-neutral: the kind itself
| property | type | values | required | default |
|---|---|---|---|---|
| effect | enum | audit | deny | modify | deploy-if-not-exists | no | — |
| enforcementMode | enum | enforced | disabled | no | — |
| managed | boolean | — | no | false |
| policyCount | integer | — | no | — |
| remediation | boolean | — | no | false |
| scope | enum | resource | group | account | organization | no | — |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "policy-engine", component: "policy-engine" }Cloud Configalibaba-cloud-configData Security Centeralibaba-data-security-centerAmazon CodeGuru Revieweraws-codeguru-reviewerAWS Configaws-configAWS Control Toweraws-control-towerIAM Access Analyzeraws-iam-access-analyzerAWS Lake Formationaws-lake-formationAWS License Manageraws-license-managerAWS Organizationsaws-organizationsAWS Resource Access Manageraws-ramAmazon Verified Permissionsaws-verified-permissionsMicrosoft Entra Conditional Accessazure-conditional-accessAzure Policyazure-policyMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementCloudflare Data Loss Preventioncloudflare-dlpCalypsoAIcalypsoaiCerboscerbosOPA GatekeepergatekeeperGuardrails AIguardrails-aiHiddenLayer AI Security PlatformhiddenlayerKubeArmorkubearmorKubewardenkubewardenKyvernokyvernoLakera Guardlakera-guardLLM Guardllm-guardNeMo Guardrailsnemo-guardrailsOpen Policy AgentopaPermit.iopermit-ioPrompt Securityprompt-securityProtect AIprotect-aiRebuffrebuffRobust Intelligencerobust-intelligenceSonarQube ServersonarqubeDigitalOcean CSPMdigitalocean-cspmAccess Context Managergoogle-access-context-managerAssured Workloadsgoogle-assured-workloadsBinary Authorizationgoogle-binary-authorizationIdentity and Access Managementgoogle-cloud-iamFirebase App Checkgoogle-firebase-app-checkModel Armorgoogle-model-armor
and 16 more → Policy engine page# yaml-language-server: $schema=../../schema/component.schema.json # The vendor-neutral policy engine: the kind itself, with no product behind it. It sets no # defaults and adds no properties, so every required kind property stays required on the node. schemaVersion: "1" type: "component" id: "policy-engine" kind: "policy-engine" provider: "default"