Cloud Custodian
6.2#12 in cloud governance softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitCloud Custodian vs Open Policy Agent Gatekeeper
Open Policy Agent Gatekeeper
7.2#3 in kubernetes security softwareFree planFree planAPILinuxSelf-hosted
VisitWhat both publish
| Fact | Cloud Custodian | Open Policy Agent Gatekeeper |
|---|---|---|
| Community support | The project points users to Slack, a mailing list, GitHub discussions, and community meetings that are open to users and developers of every skill level. | The project site links to a Gatekeeper Slack channel and community meetings. |
| Purpose | Cloud Custodian manages cloud resources by filtering and tagging them, then applying actions through policies written in a YAML domain specific language. | Gatekeeper is a validating and mutating Kubernetes webhook that enforces CRD-based policies evaluated by Open Policy Agent. |
| Security reporting | The project asks people to report security vulnerabilities to its security team at [email protected] and says it will acknowledge reports by email. | Security reports are requested by email, with acknowledgement and follow-up after investigation. |
Cloud Custodian plans
- Cloud CustodianFree
Open Policy Agent Gatekeeper plans
- GatekeeperFree
- Open-source GatekeeperFree
Pick Cloud Custodian if…
Cloud Custodian suits teams managing cloud resources who want policy-based controls for security, compliance, tagging or cost management. It is relevant to users working with AWS, Azure or Google Cloud Platform resources.
Pick Open Policy Agent Gatekeeper if…
Gatekeeper suits teams managing Kubernetes clusters that need policy enforcement, mutation or recurring audits of existing resources. It is self-hosted and requires cluster-admin permissions to install.