Aspect is a simple rule based engine to ensure that cloud resources meet organisational requirements across multiple clouds and regions at the same time. The same rules based engine is available as a REPL to support arbitary sub-second evaulation of cloud resources.
- Comprehensive cloud provider support:
- AWS
- Azure (Coming Soon!)
- Cloud native authentication mechanisms
- Policy declaration language similar to OpenPolicy Agent's rego See Examples
- Policy suites written in YAML that supports both multiple clouds and regions See Examples
- Interactive policy builder
- Validate policies and policy suites at development time
- Fully interactive CLI for viewing and evaluating cloud resources
The quickest way to get started is to use the prebuilt docker image:
docker run --rm -it im5tu/aspect:latestaspect policy list builtin- Lists all of the built in policiesaspect policy list view <policy name>.policy- Views the contents of a policyaspect policy init <policy name>.policy- Creates an empty policy for a specified resourceaspect policy validate <policy name>.policy- Ensures that the policy is validaspect run <policy name>.policy- Runs the policy against your cloud infrastructure reporting its compliance
In order to construct a policy, checkout the Policy Syntax documentation to see how to construct a policy document and how to verify resources.
For a full list of the commands and their available options, visit the CLI Commands Documentation. Please note, you may also need to configure cloud specific credentials. See the instructions for AWS and Azure.
- AWS
- Security Groups
See the open issues for a list of proposed features (and known issues).
Here are some of the awesome community projects that make this project possible:
Contributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are greatly appreciated.
Take a look at our contribution guide for more details.