IaC Policy Controls
Evaluation of IaC resources is performed using the same Policies and controls as CSPM.
The set of policies that apply when evaluating a folder in a repository is defined by creating Zones
When running a Github integration to check the compliance of a pull request during development, Sysdig will collect all the policies that apply for that context (the repository, folder and branch pattern) according to the defined zones, and run the controls from those polcies that apply for the evaluated resource type.
You can navigate in the product to
Policies > Posture Policies to find the list of requirements and controls for each policy.
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.