
Assign policy groups by stack and account tags
Policy groups can now add stacks and cloud accounts by tag, so new infrastructure gets the right policy coverage automatically as it's created.
Dan Biwer
2 min read
Policy groups can now add stacks and cloud accounts by tag, so new infrastructure gets the right policy coverage automatically as it's created.
Dan Biwer
2 min read
Compare the best policy as code tools in 2026: OPA, HashiCorp Sentinel, Kyverno, Checkov, and Pulumi Policies, chosen honestly by fit.
Pulumi Content Team
14 min read
Align your AWS infrastructure to ISO/IEC 27001:2022 with a pre-built Pulumi policy pack of 238 ready-to-run security policies.
Dan Biwer
3 min read
Policy packs can now reference Pulumi ESC environments for secrets and configuration, replacing hardcoded credentials with centralized, secure management.
Dan Biwer
3 min read
Use the new `pulumi policy analyze` command to run local policy packs against existing stack state, with workflows for developers and AI agents.
Fraser Waters
3 min read
OPA/Rego is now a stable, first-class policy language for Pulumi with Kubernetes Gatekeeper compatibility and full feature parity.
Levi Blackstone
6 min read
Run Pulumi Insights discovery scans and policy evaluations on your own infrastructure with customer-managed workflow runners.
Levi Blackstone
3 min readDiscover cloud resources and enforce governance policies with new Pulumi Service Provider resources for visibility and compliance as code.
Pulumi Discovery Team
Pulumi partners with AWS to bring AWS Organizations Tag Policies validation to infrastructure as code, enforcing mandatory tagging requirements.
Alejandro Cotroneo
Launching the governance lifecycle: AI-powered remediation, pre-built compliance packs, continuous auditing, and a new Policy Findings hub.


3 authors
Page 1 of 4