Top 4 Rust policy-as-code Projects

cloudformation-guard

20 1,230 8.6 Rust

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

Project mention: Pull Request Reporting with CDK-Validator-CFNGuard and Azure DevOps | dev.to | 2024-02-16

If you now use these services to fix the infrastructure findings, a drift occurs that is not always easy to fix. It is better to check for possible problems before the actual deployment. This approach is called “Shift-Left”. This can be done with the package cdk-validator-cfnguard. It's based on the CloudFormation Guard package.

Kubewarden

4 132 9.5 Rust

Kubewarden is a policy engine for Kubernetes. It helps with keeping your Kubernetes clusters secure and compliant. Kubewarden policies can be written using regular programming languages or Domain Specific Languages (DSL) sugh as Rego. Policies are compiled into WebAssembly modules that are then distributed using traditional container registries.
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
cedar-agent

7 118 6.9 Rust

Cedar-agent is the easiest way to deploy and run Cedar

Project mention: How Reddit Built Authorization with OPA | dev.to | 2023-12-18

Open Policy Administration Layer (OPAL), is an open source administration layer for Policy Engines such as Open Policy Agent (OPA), and AWS' Cedar Agent that detects changes to both policy and policy data in real time and pushes live updates to those agents. Using Git repositories and GitOps as a method for rule storage, OPAL provides several benefits:

deprecated-api-versions-policy

1 15 7.1 Rust

A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

Project mention: Isint release cycle becoming a bit crazy with monthly releases and deprecations ? | /r/kubernetes | 2023-07-11

If you use something like kubewarden, people write policies and update them on GitHub for example

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).