Skip to main content
Pulumi logo Pulumi logo
25.8K Contact us Sign in Dashboard Get started
  1. Docs
  2. Discovery & governance

    Discovery & governance

    Discovery & governance provides comprehensive cloud visibility and policy enforcement—discover all infrastructure and ensure compliance, regardless of how resources were created.
    Get started

    Overview

    Pulumi Cloud provides complete visibility and control over your cloud infrastructure, whether resources were provisioned by Pulumi, Terraform, CloudFormation, or created manually.

    Ways to get started:

    • New to Pulumi? Start with Discovery to scan existing infrastructure, then add Policy enforcement.
    • Already using Pulumi IaC? Add Policy to enforce compliance before deployments reach production.
    • Investigating infrastructure relationships? Use the Context API to query dependencies, ownership, stack consumers, and change impact.

    Discovery

    Get started

    Scan your cloud accounts and discover all infrastructure resources.

    How Discovery works

    Learn how Discovery scans cloud accounts and organizes resources for visibility and import.

    Cloud accounts

    Connect cloud accounts to sync and monitor infrastructure resources.

    Search resources

    Find resources using structured queries or natural language.

    Visual Import

    Import existing cloud resources into Pulumi management.

    Export resource data

    Export resource data to CSV or integrate via REST API.

    Policies

    Get started

    Configure your first policy group and enforce compliance across Pulumi stacks and discovered cloud resources.

    Policy as code

    Learn how policies, policy packs, and policy groups work together to enforce compliance.

    Pre-built policy packs

    Use ready-made compliance rules for CIS, HITRUST, NIST, PCI DSS, ISO 27001, and CMMC with no code required.

    Policy groups

    Apply policy packs with preventative enforcement to block non-compliant deployments or audit mode to scan all discovered resources.

    Policy findings

    View violations, track remediation progress, and monitor compliance trends across all infrastructure.

    Context API

    Context API overview

    Learn how graph queries help people investigate infrastructure dependencies, ownership, consumers, and change impact.

    Query the Context API

    Build selectors, follow relationships, interpret responses, and check whether an answer is complete.

    Customer-managed runners

    Run on customer-managed runners

    Run Discovery scans and audit policy evaluations on runners you host in your own infrastructure.

    Have questions?

    For questions or feedback, reach out on community Slack, GitHub, or contact support.

    The infrastructure as code platform for any cloud.

    Contact us Get started