env0 supports both runtime and deployment policies

Policies are used to regulate cloud usage within an organization. env0 supports runtime and deployment policies as described below.

Runtime Policies

Runtime policies are native policies in the env0 system that are consistently monitored and enforced against running environments on an ongoing basis.

Runtime policies include

Environment Destroy Protection
Environment Limits
Environment Time to Live
Default Auto-Approve
Cost Estimation
Skip Apply Step
Skip Redundant Deployments
Skip PR Plan on Merge Commits
Do Not Report Skipped Status Check

Deployment Policies

Environments are checked against Deployment Policies, only when deploying or redeploying an environment (whenever changes may be made to the environment) to ensure compliance against security, governance, or other standards.

Deployment Policies are based on the Open Policy Agent (OPA) framework and are invoked at the appropriate deployment stage using the Custom Flows feature.