Create and manage cloud security rules

You can create your own custom rules to use them in custom cloud security policies for the following use cases:

| **Rule type** | **Description** |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------- |
| Graph | Graph rules leverage graph queries to monitor your environment for complex attack paths and potential breach paths. |
| Configuration (Config) | Configuration rules monitor your resource configurations for potential policy violations. |
| Data | Data rules protect against malware and enable data classification. |
| Identity | Identity rules monitor the identities in your cloud environment for excess or unused permissions. |
| Network Exposure | Network exposure rules detect assets exposed to the internet. |
| AI | AI rules monitor your AI ecosystem for risks and misconfigurations. |
| Attack Path (Legacy) | Attack path rules monitor the high risk attack paths for possible breaches. |

You can view and manage cloud posture security rules from the **Posture Management** → **Rules & Policies** → **Rules** → **Cloud Security** page.

<br>

Sub-topics

• Create a graph rule
• Create a configuration rule
• Create a data rule
• Create an identity rule
• Create a network exposure rule
• Create an AI rule
• Create an attack path (legacy) rule
• View cloud security rule status
• Edit a cloud security rule
• Enable or disable a rule
• Use an existing rule to create a new one
• Delete a custom cloud security rule