Policy-as-code (PaC) is a technology that uses code to define and manage the rules and conditions that make up the policy. With Policy-as-code, policies are written using a programming language such as Python, YAML, or Rego.

Policy-as-Code allows companies to manage security and governance the same way using a software development approach,  with all of its advantages.

• Policy-as-code is extremely customizable, flexible, and scalable.
• Companies can leverage existing code management practices for the entire lifecycle (development, quality control, iteration, etc.).
• Code management practices allow total control of internal workflows and ownership.
• Policy-as-code is portable and future-proof.

Secberus offers 10 out-of-the-box frameworks. 

Yes, policy-as-code is fully customizable. You can set exceptions based on any metadata and easily adjust the coverage of cloud accounts.

We offer over 550 out-of-the-box and built-in policies in the platform. These policies are ready to assess and adapt to any use case.

Yes, you can create a new policy or clone and edit an existing policy. 

Create New Policy

Navigate to the Policies tab and click New Policy.

Create a name, choose severity, and add any Security, Operational, or Compliance categories.

Select Policy Editor.

Use the Add Resource Types section to search available resources to write your policy.

Once you have written your policy, you can test your policy for real-time validation on connected cloud environments by clicking Test.

Click Save to publish your custom policy. You can then subscribe or unsubscribe from this policy.

• What is RBAC?

Role-Based Access Control (RBAC) is an identity management mechanism that associates a set of access privileges with a particular role, often corresponding to a job function, location, or department. 

• What is ABAC?

Attribute-Based Access Control (ABAC) is an identity management mechanism that lets administrators grant access rights and protocols to users by creating policies that combine attributes like job title, seniority, file type, sensitivity, date, and more.