Back to glossary
Cloud-native security
An approach to securing cloud environments using controls built for how cloud infrastructure actually works – APIs, managed services, and provider-native policy mechanisms – rather than controls ported over from on-premises data centers.
Frequently Asked Questions
How do you enforce cloud security policies beyond native cloud controls?
Native cloud controls are powerful, but each provider has its own policy model, language, and enforcement primitives, making preventive policies difficult to build, maintain, and operate consistently at scale. Aryon abstracts that complexity into a consistent layer for defining and enforcing the organization's security policies across cloud environments, while the underlying enforcement remains cloud-native.
What is GCP Organization Policy?
GCP Organization Policy is Google Cloud's native governance service for restricting how cloud resources can be configured across the resource hierarchy. Policies are built around constraints, which define the specific rule to enforce, and can be applied at the organization, folder, or project level, with inheritance to resources underneath.
Does Aryon require an agent or workload in my environment to enforce policies?
No. Aryon is agentless and does not run workloads inside your production environment or sit in the application traffic path. Preventive enforcement is carried out using the cloud provider's native controls, rather than an Aryon agent or inline proxy.