A PRACTICAL GUIDE TO GETTING STARTED WITH POLICY AS CODE

Summary from the TLDR InfoSec newsletter

Policy as Code (PaC) is an approach that aids the assessment of an organization's configuration and validation of compliance requirements through the use of software automations. Before beginning to implement PaC, an organization should map out the level of effort to codify policies and the criticality of the policy. One mechanism to begin using PaC can be through CloudFormation Hooks or CloudFormation Guards.