Policies Overview

Policies are used to regulate cloud usage within an organization. env0 supports runtime and deployment policies as described below.

Runtime Policies

Runtime policies are native policies in the env0 system that are consistently monitored and enforced against running environments on an ongoing basis.

Runtime policies include

Environment Destroy Protection
Environment Limits
Environment Time to Live
Default Auto-Approve
Cost Estimation
Skip Apply Step
Skip Redundant Deployments
Skip PR Plan on Merge Commits
Do Not Report Skipped Status Check
Force Remote Backend
Drift Detection

Deployment Policies

Environments are checked against Deployment Policies, only when deploying or redeploying an environment (whenever changes may be made to the environment) to ensure compliance against security, governance, or other standards.

Deployment Policies are based on the Open Policy Agent (OPA) framework and are invoked at the appropriate deployment stage using the Approval Policies feature.