---
title: Discovery & governance
description: Discovery & governance provides comprehensive cloud visibility and policy enforcement—discover all infrastructure and ensure compliance, regardless of how resources were created.

url: /docs/discovery-governance/
---


# Discovery & governance

Discovery & governance provides comprehensive cloud visibility and policy enforcement—discover all infrastructure and ensure compliance, regardless of how resources were created.


[Get Started](/docs/discovery-governance/discovery/get-started/)


## Overview



## Discovery

- [Get Started](/docs/discovery-governance/discovery/get-started/) — Scan your cloud accounts and discover all infrastructure resources.
- [How Discovery Works](/docs/discovery-governance/discovery/) — Learn how Discovery scans cloud accounts and organizes resources for visibility and import.
- [Cloud Accounts](/docs/discovery-governance/discovery/accounts/) — Connect cloud accounts to sync and monitor infrastructure resources.
- [Resource Search](/docs/discovery-governance/discovery/search/) — Find resources using structured queries or natural language.
- [Visual Import](/docs/discovery-governance/discovery/visual-import/) — Import existing cloud resources into Pulumi management.
- [Data Export](/docs/discovery-governance/discovery/data-export/) — Export resource data to CSV or integrate via REST API.


## Policies

- [Get Started](/docs/discovery-governance/policy/get-started/) — Configure your first policy group and enforce compliance across Pulumi stacks and discovered cloud resources.
- [Policies Concepts](/docs/discovery-governance/policy/) — Learn how policies, policy packs, and policy groups work together to enforce compliance.
- [Pre-built Policy Packs](/docs/discovery-governance/policy/policy-packs/pre-built-packs/) — Use ready-made compliance rules for CIS, HITRUST, NIST, PCI DSS, ISO 27001, and CMMC with no code required.
- [Policy Groups](/docs/discovery-governance/policy/policy-groups/) — Apply policy packs with preventative enforcement to block non-compliant deployments or audit mode to scan all discovered resources.
- [Policy Findings](/docs/discovery-governance/policy/policy-findings/) — View violations, track remediation progress, and monitor compliance trends across all infrastructure.


## Context API

- [Context API overview](/docs/discovery-governance/context-api/) — Learn how graph queries help people investigate infrastructure dependencies, ownership, consumers, and change impact.
- [Query the Context API](/docs/discovery-governance/guides/context-api/) — Build selectors, follow relationships, interpret responses, and check whether an answer is complete.


## Self-hosted

- [Self-hosted Discovery](/docs/discovery-governance/self-hosted/) — Run Discovery scans and policy evaluations in your own environment using customer-managed workflow runners.


## Have questions?

For questions or feedback, reach out on [community Slack](https://slack.pulumi.com), [GitHub](https://github.com/pulumi), or [contact support](/support/).