Cloud security rules and policies

Requires a Cloud Posture Security, Cloud Runtime Security or Cortex XSIAM Premium license.

Cloud security rules and policies are part of the Cortex Cloud posture management framework. Your cloud security administrators and application security practitioners can use cloud security rules and policies to define and manage security guardrails consistently across AWS, Azure, GCP, and other cloud providers. They can use them to define detections for specific environments when specific conditions occur so that findings and issues related to threats or misconfigurations are generated and can be addressed.

### This topic includes the following information:

* [Cloud security rules](cloud-security-rules-and-policies/cloud-security-rules)
* [Cloud security policies](cloud-security-rules-and-policies/cloud-security-policies)
* [Create and manage cloud security rules](cloud-security-rules-and-policies/create-and-manage-cloud-security-rules)
* [Create and manage cloud security policies](cloud-security-rules-and-policies/create-and-manage-cloud-security-policies)

Sub-topics

• Cloud security rules
• Cloud security policies
• Create and manage cloud security rules
  • Create a graph rule
  • Create a configuration rule
  • Create a data rule
  • Create an identity rule
  • Create a network exposure rule
  • Create an AI rule
  • Create an attack path (legacy) rule
  • View cloud security rule status
  • Edit a cloud security rule
  • Enable or disable a rule
  • Use an existing rule to create a new one
  • Delete a custom cloud security rule
• Create and manage cloud security policies
  • Create a cloud security policy
  • Edit a cloud security policy
  • Enable or disable a policy
  • Use an existing policy to create a new one
  • Delete a custom cloud security policy