By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
PreferencesDenyAccept
Back to glossary

Policy as code

Writing security and compliance rules in a structured, machine-readable format so they can be version-controlled, tested, and enforced automatically, instead of living only in a written standard.

Table of contents
Section title

Related glossary terms

Infrastructure as Code (IaC)

Defining cloud resources in version-controlled templates, such as Terraform or Pulumi, instead of configuring them manually.

Read definition

Cloud security policy engine

A system that lets a team define a security rule once and have it enforced consistently at the cloud control plane, no matter how or where a resource is created or changed.

Read definition

Policy marketplace

A library of ready-to-deploy policies mapped to common frameworks and attack patterns, instead of every rule being written from scratch.

Read definition

Azure Policy

Microsoft's native governance service for evaluating and enforcing rules against Azure resource configurations, at the management-group, subscription, or resource-group level.

Read definition

Ready to take your first proactive step?

Watch a Demo Now!