Ready-To-Use Policies

env zero’s ready-to-use policies provide pre-configured guardrails that you can integrate into your Infrastructure as Code workflows. These policies help enforce governance, security, and compliance standards without requiring you to write custom policy code from scratch.

Policy categories

Policies are organized into seven categories that cover key areas of infrastructure governance:

Security: Protect your infrastructure from vulnerabilities and ensure secure configurations
Networking: Control network access, configuration, and connectivity rules
IAM: Manage identity and access permissions across your cloud resources
Compliance: Meet regulatory requirements and industry standards
Cost: Monitor and control infrastructure spending and resource usage
Performance: Optimize resource allocation and system performance
Governance: Enforce organizational policies and operational standards

All policy code is open source, allowing you to review exactly what each policy does and how it works.

Viewing your policies

To see all policies currently configured in your organization:

Step 1: Navigate to policies

Click on Policies in the organization menu to access your policy dashboard.

Step 2: Review policy table

The policy table displays:
- All configured policies in your organization
- Policy categories and names
- Assignment scope (organization, specific projects, or environments)

The table gives you a clear view of where each policy is applied, helping you understand current governance coverage across projects and environments.

Adding policies

To add a new policy to your workflow:

Step 1: Start policy creation

Click Add Policyin the policies section to open the policy selection screen.

Step 2: Select

Browse the available policies and select the one that matches your requirements. You can filter by category or search by name.

Review the policy details and open source code to understand exactly what the policy enforces before selection.

Step 3: Configure policy settings

Fill in the required parameters for the selected policy. Each policy includes specific settings relevant to its function.

Step 4: Set assignment scope

Choose where the policy should apply:
- Organization-wide: Applies to all projects and environments
- Specific projects: Applies only to selected projects
- Specific environments: Applies only to selected environments

Warning: Organization-wide policies affect all deployments. Consider scope carefully.

Save the configuration to activate the policy. It will now be enforced according to your specified scope.

Step 5: Activate policy

Save the configuration to activate the policy. It will now be enforced according to the chosen scope.

Policy enforcement during deployment

Once configured, policies are enforced as part of the deployment workflow and appear during the approval process.

Approval policies step

During deployment runtime, you can view active policies in the Approval policies step of the deployment process. This step shows:

Which policies are being evaluated
Policy evaluation results
Any policy violations that need attention
Approval requirements based on policy outcomes

The Approval policies step ensures that all governance requirements are validated before infrastructure changes are applied.

Ready-to-use policies streamline governance by providing battle-tested rules you can deploy immediately, reducing the time and effort needed to establish comprehensive infrastructure oversight.