IaC Policy Controls

Introduction

When running a Github integration to check the compliance of a pull request during development, Sysdig will run the controls from the following policies, depending on the resource type.

You can navigate in the product to Policies > CSPM Policies to find the list of requirements and controls for each policy.

Kubernetes Workloads

• CIS Kubernetes Benchmark
• Sysdig Kubernetes - based on Sysdig’s security research and best practices
• Custom policies

Amazon Web Services

• CIS Amazon Web Services Foundations Benchmark
• Custom policies