Skip to content

Commit

Permalink
updating screenshots and addressing todos
Browse files Browse the repository at this point in the history
  • Loading branch information
interurban committed Jan 30, 2025
1 parent 5ef1a47 commit b701906
Show file tree
Hide file tree
Showing 4 changed files with 2 additions and 5 deletions.
3 changes: 1 addition & 2 deletions content/docs/iac/using-pulumi/crossguard/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,9 +37,8 @@ If a stack or account belongs to multiple Policy Groups, the Pulumi Cloud will a
This means that if a stack belongs to multiple Policy Groups that specify different versions of a Policy Pack, only the newest version of that pack will be run. For example, if a stack `my-stack` belongs to Policy Group `production-stacks` that requires Policy Pack `aws-policies` version 2 and Policy Group `platform-stacks` that requires Policy Pack `aws-policies` version 4, only version 4 of `aws-policies` would be run. In the case that a stack has the same version of a Policy Pack with different configuration enabled, the most recently modified Policy Pack and configuration will be enforced.

Under a stack's "Settings" tab you can take a look at the Policy Packs that would be enforced on a `preview` or `update` as well as the Policy Groups that the stack belongs to.
// TODO: update for accounts

![Stack Policy Settings](/images/docs/guides/crossguard/stack-policies.jpg)
![Stack Policy Settings](/images/docs/guides/crossguard/stack-policies.png)

## How does Policy as Code work during a stack import or refresh?

Expand Down
4 changes: 1 addition & 3 deletions content/docs/iac/using-pulumi/crossguard/get-started.md
Original file line number Diff line number Diff line change
Expand Up @@ -167,8 +167,6 @@ You can find more example Policy Packs in the [examples repo](https://github.com
### Running Locally {#running-locally}
TODO: this only applies to IaC. Insights is cloud-only.
Now let's take a look at how to run the Policy Pack locally against a Pulumi program.
{{< chooser language "typescript,python" >}}
Expand Down Expand Up @@ -329,7 +327,7 @@ Once you’ve validated the behavior of your policies, an organization administr
The CLI by default enables the Policy Pack to your default Policy Group. If you would like to add the Policy Pack to a different Policy Group, you can use the `--policy-group` flag.
TODO: May want to add a section about Policy Groups or link to the info under core-concepts.md
Learn more about Policy Groups and other core concepts in the [Policy as Code core concepts](/docs/using-pulumi/crossguard/core-concepts/) documentation.
## Next Steps
Expand Down
Binary file not shown.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit b701906

Please sign in to comment.