pulumi policy | CLI commands

Manage policies, including policy packs, groups and issues

Synopsis

Manage policies, including policy packs, groups and issues.

Policy packs define the policies your resources are checked against. Policy groups control which packs are enforced on which stacks and cloud accounts. Policy issues are the violations those packs report.

pulumi policy [flags]

Options

  -h, --help   help for policy

Options inherited from parent commands

      --color string                 Colorize output. Choices are: always, never, raw, auto (default "auto")
  -C, --cwd string                   Run pulumi as if it had been started in another directory
      --disable-integrity-checking   Disable integrity checking of checkpoint files
  -e, --emoji                        Enable emojis in the output
  -Q, --fully-qualify-stack-names    Show fully-qualified stack names
      --logflow                      Flow log settings to child processes (like plugins)
      --logtostderr                  Log to stderr instead of to files
      --memprofilerate int           Enable more precise (and expensive) memory allocation profiles by setting runtime.MemProfileRate
      --non-interactive              Disable interactive mode for all commands
      --otel-traces string           Export OpenTelemetry traces to the specified endpoint. Use file:// for local JSON files, grpc:// or https:// for remote collectors
      --profiling string             Emit CPU and memory profiles and an execution trace to '[filename].[pid].{cpu,mem,trace}', respectively
      --tracing file:                Emit tracing to the specified endpoint. Use the file: scheme to write tracing data to a local file
  -v, --verbose int                  Enable verbose logging (e.g., v=3); anything >3 is very verbose

SEE ALSO

• pulumi - Pulumi command line
• pulumi policy analyze - Analyze existing resource state against policy packs
• pulumi policy compliance - [EXPERIMENTAL] Inspect policy compliance results
• pulumi policy disable - Disable a Policy Pack for a Pulumi organization
• pulumi policy enable - Enable a Policy Pack for a Pulumi organization
• pulumi policy exception - [EXPERIMENTAL] Manage policy exceptions
• pulumi policy get - [EXPERIMENTAL] Get the details of a Policy Pack
• pulumi policy group - Manage policy groups
• pulumi policy install - Install required policy packs for a stack
• pulumi policy issue - [EXPERIMENTAL] Manage policy issues
• pulumi policy list - List all Policy Packs for a Pulumi organization
• pulumi policy new - Create a new Pulumi Policy Pack
• pulumi policy publish - Publish a Policy Pack to the Pulumi Cloud
• pulumi policy remove - Removes a Policy Pack from a Pulumi organization
• pulumi policy validate-config - Validate a Policy Pack configuration