pulumi-hugo-cn/themes/default/layouts/page/crossguard.html

{{ define "hero" }}
    {{ partial "hero" (dict "title" "Policy as Code for Any Cloud") }}
{{ end }}

{{ define "main" }}
    <section id="overview" class="my-12">
        <div class="container mx-auto text-center flex-col">
            <h2>Pulumi CrossGuard</h2>
            <p>Continuously enforce your organization's cloud governance &mdash; security, compliance, cost controls, and more.</p>
            <div class="header-hero-actions mt-8">
                <a class="btn-primary" href="{{ relref . "/docs/using-pulumi/crossguard/get-started" }}">Try CrossGuard</a>
                <a class="btn-secondary" href="{{ relref . "/contact.md" }}">Get a Demo</a>
            </div>
            <div class="mt-8 text-sm">
                Open source and available in
                <a class="link" href="{{ relref . "/pricing" }}">any Pulumi edition</a>.
            </div>
        </div>
    </section>

    <section id="what-it-is" class="mt-32 px-4 px-4">
        <div class="container mx-auto">
            <h2 class="text-center">Features</h2>
            <div class="md:flex mx-auto max-w-5xl mb-8">
                <div class="md:w-1/3 p-4">
                    <div class="text-center p-6 h-full">
                        {{ partial "color-icon.html" (dict "icon" "shield" "icon_color" "violet") }}
                        <h5>Any Policy</h5>
                        <p>
                            Use off-the-shelf rules or define your own, for security, cost, compliance, reliability best practices &mdash; just about anything. Use package managers
                            to share and reuse rules.
                        </p>
                    </div>
                </div>
                <div class="md:w-1/3 p-4">
                    <div class="text-center p-6 h-full">
                        {{ partial "color-icon.html" (dict "icon" "clouds" "icon_color" "yellow") }}
                        <h5>Any Cloud</h5>
                        <p>
                            Govern application and infrastructure resources on any cloud, including AWS, Azure, Google Cloud, Kubernetes, or over three dozen more infrastructure
                            providers.
                        </p>
                    </div>
                </div>
                <div class="md:w-1/3 p-4">
                    <div class="text-center p-6 h-full">
                        {{ partial "color-icon.html" (dict "icon" "rocketship" "icon_color" "salmon") }}
                        <h5>Familiar and Powerful</h5>
                        <p>
                            Define custom policies using familiar languages like JavaScript and Python. Use great editors, test frameworks, libraries, and tools for productivity
                            and correctness.
                        </p>
                    </div>
                </div>
            </div>
            <div class="md:flex mx-auto max-w-5xl mb-8">
                <div class="md:w-1/3 p-4">
                    <div class="text-center p-6 h-full">
                        {{ partial "color-icon.html" (dict "icon" "exchange" "icon_color" "blue") }}
                        <h5>Flexible Enforcement</h5>
                        <p>
                            Apply policies using coarse- or fine-grained controls. Target individual projects, manage organization-wide policies, or group projects for differences
                            in environments and regions.
                        </p>
                    </div>
                </div>
                <div class="md:w-1/3 p-4">
                    <div class="text-center p-6 h-full">
                        {{ partial "color-icon.html" (dict "icon" "gear" "icon_color" "purple") }}
                        <h5>Configurable</h5>
                        <p>Define policies that can be configured at the point of application, including enforcement level, letting you vary behavior based on project needs.</p>
                    </div>
                </div>
                <div class="md:w-1/3 p-4">
                    <div class="text-center p-6 h-full">
                        {{ partial "color-icon.html" (dict "icon" "cycle" "icon_color" "violet") }}
                        <h5>Automate and Integrate</h5>
                        <p>
                            Automate governance using programmable libraries and REST APIs, easily integrating with external services such as web services, asset tracking
                            databases, pricing lists, and more.
                        </p>
                    </div>
                </div>
            </div>
        </div>
    </section>

    <section id="scenarios" class="py-16 px-4">
        <div class="text-center mb-8">
            <h2>Policy as Code Scenarios</h2>
            <p class="my-0">Accelerate your organization's delivery while still staying compliant</p>
        </div>
        <div class="container md:mx-auto md:flex mb-8">
            <div class="md:w-1/2 flex-shrink-0 md:mr-8">
                <h4>Security</h4>
                <p>Maintain security across all cloud infrastructure assets.</p>
                <div class="md:ml:4">
{{ $code := `new PolicyPack("acmecorp-security", {
    policies: [{
        name: "prohibited-public-internet",
        description: "Reject public internet access.",
        enforcementLevel: "mandatory",
        validateResource: validateResourceOfType(
            aws.ec2.SecurityGroup,
            (sg, args, reportViolation) => {
                const hasInternetAccess = sg.ingress.find(
                    rule => rule.cidrBlocks.includes("0.0.0.0/0")
                );
                if (hasInternetAccess) {
                    reportViolation("Illegal internet access");
                }
            },
        ),
    }],
);`
}}

                    {{ partial "code" (dict "code" $code "lang" "js") }}
                </div>
                <p class="text-sm italic mt-0">Prohibiting network access from the Internet.</p>
            </div>
            <div class="md:w-1/2 flex-shrink-0 md:mr-8">
                <h4>Compliance</h4>
                <p>Meet, and stay meeting, compliance standards.</p>
                <div class="md:ml:4">
{{ $code := `new PolicyPack("acmecorp-compliance", {
    policies: [{
        name: "required-storage-region",
        description: "Data must be stored in the US.",
        enforcementLevel: "mandatory",
        validateResource: validateResourceOfType(
            aws.s3.Bucket, (bucket, args, reportViolation) => {
                if (!bucket.region.startsWith("us-")) {
                    reportViolation("Non-US bucket detected");
                }
            },
        ),
    }],
);`
}}

                    {{ partial "code" (dict "code" $code "lang" "js") }}
                </div>
                <p class="text-sm italic mt-0">Disallowing storage outside of specific regions.</p>
            </div>
        </div>
        <div class="container md:mx-auto md:flex">
            <div class="md:w-1/2 flex-shrink-0 md:mr-8">
                <h4>Cost Controls</h4>
                <p>Ensure cost conscious deployments.</p>
                <div class="md:ml:4">
{{ $code := `new PolicyPack("acmecorp-cost", {
    policies: [{
        name: "required-cost-tags",
        description: "Cost tags are required.",
        enforcementLevel: "mandatory",
        validateResource: (args, reportViolation) => {
            if (isTaggable(args.type) &&
                !args.resource["tags"]["Cost Center"]) {
                reportViolation("Resource missing tags");
            }
        ),
    }],
);`
}}

                    {{ partial "code" (dict "code" $code "lang" "js") }}
                </div>
                <p class="text-sm italic mt-0">Requiring specific cost allocation tags.</p>
            </div>
            <div class="md:w-1/2 flex-shrink-0 md:mr-8">
                <h4>Continuous Delivery</h4>
                <p>Catch policy violations before they escape using CI/CD.</p>
                <img class="block mx-auto rounded" src="/images/screens/pac-in-action.png" alt="Policy as Code in CI/CD" />
                <p class="text-sm italic">A live dashboard of organizational violations in Pulumi Cloud.</p>
            </div>
        </div>
    </section>

    <section id="case-studies" class="py-16 px-4">
        <div class="container mx-auto">
            <div class="lg:flex lg:items-stretch">
                <div class="w-full lg:w-1/2 p-6">
                    <div class="flex flex-col card p-6 bg-white h-full relative">
                        <p class="text-left mt-0 italic text-black">
                            Pulumi supercharged our whole organization by letting us create reusable building blocks that developers can leverage to provision new resources and
                            enforce organizational policies for logging, permissions, resource tagging and security. This has empowered our developer teams to self-provision
                            resources and ship new capabilities faster without having to wait for the infrastructure team to deploy new resources on their behalf.
                        </p>
                        <div class="flex flex-grow items-end">
                            <div class="w-2/3 text-left">
                                <p class="text-black mb-0">Igor Shapiro</p>
                                <p class="mt-0">Principal Engineer</p>
                            </div>
                            <div class="w-1/3 my-4">
                                {{ partial "customer-logo.html" (dict "logo" "lemonade") }}
                            </div>
                        </div>
                        <div class="card-cta-btn text-center">
                            <a class="btn-primary" href="{{ relref . "/case-studies/lemonade" }}">Learn More</a>
                        </div>
                    </div>
                </div>

                <div class="w-full lg:w-1/2 p-6">
                    <div class="flex flex-col card p-6 bg-white h-full relative">
                        <p class="text-left mt-0 italic text-black">
                            With Pulumi CrossGuard we can provide reusable infrastructure components to our application teams and ensure that their implementations adhere to
                            company standards.
                        </p>
                        <div class="flex flex-grow items-end">
                            <div class="w-2/3 text-left">
                                <p class="text-black mb-0">Fernando Carlietti</p>
                                <p class="mt-0">Lead DevOps Engineer</p>
                            </div>
                            <div class="w-1/3 my-4">
                                {{ partial "customer-logo.html" (dict "logo" "credijusto") }}
                            </div>
                        </div>
                        <div class="card-cta-btn text-center">
                            <a class="btn-primary" href="{{ relref . "/case-studies/credijusto" }}">Learn More</a>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </section>

    <section id="webinar" class="bg-white py-16 px-4">
        <div class="container mx-auto">
            <div class="text-center mb-8">
                <h2>Getting Started with Policy as Code</h2>
            </div>

            <!-- Rendered with Hugo's YouTube shortcode: https://gohugo.io/content-management/shortcodes/#youtube -->
            <div class="rounded shadow-md" style="position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden;">
                <iframe
                    src="//www.youtube.com/embed/_8YYfhtTs94?rel=0"
                    style="position: absolute; top: 0; left: 0; width: 100%; height: 100%; border:0;"
                    allowfullscreen=""
                    title="Introduction to Pulumi: Universal Infrastructure as Code"
                ></iframe>
            </div>
        </div>
    </section>
{{ end }}