What is a Cloud Rule?

Cloud rules are collections of cloud-specific resources that can be applied to cloud accounts. Because they can contain many different resources, they can be used for many different purposes, making them the most versatile tool in your Kion toolbox.

Note: The most common uses for cloud rules include:

• Identity management

• Account provisioning

• Infrastructure management

• Compliance enforcement

Cloud rules can be applied hierarchically and inherited from parent OU to child OUs and projects, or they can be applied directly to individual projects. This enables account management at a high level by creating a single point where you can easily manage all descendant accounts.

Cloud rules can apply the following resources to cloud accounts:

• AWS IAM policies

• AWS AWS CloudFormation templates

• Shared AWS AMIs

• AWS service catalog portfolios

• AWS service control policies

• Azure role definitions

• Azure policy definitions

• Azure ARM templates

• Google Cloud IAM roles

• Compliance standards

• Automation policies

• Pre-rule and post-rule webhooks

Demonstration

What Next?

• Cloud Rule Best Practices

• Cloud Rule Inheritance and Exemption

• Create a Cloud Rule

• Managing Cloud Rules on Resources