10.1 OverviewCopy Anchor Link

Governance enables policy-driven compliance enforcement with aggregated workflows across all connected accounts.

10.2 Policy GroupsCopy Anchor Link

System-created policy groups available on the platform:

• GDPR Pack — Prebuilt GDPR controls

• HIPAA Pack — Healthcare compliance controls

• SOC2 Pack — SOC2 compliance controls

• NIST

• ISO

• CIS Benchmark

Policy Group tab has some cards with specific values like –

• Total Groups – Organization-wide policy groups

• Active – All active groups

• Inactive – Not evaluated

• Average Compliance – Across all groups

Policy Groups tab attributes: Group Name, Description, Policies, Compliance, Status, Created By. Export available list of policy groups as CSV, Excel, or PDF. Here you can search the policy group by its name, also apply filter of status, Created By.

10.3 PoliciesCopy Anchor Link

Individual governance policies by type:

• Cloud Policies — Powered by Cloud Custodian

• Host Policies — Powered by Shell Scripts

10.4 Policy LifecycleCopy Anchor Link

Create a Policy GroupCopy Anchor Link

Step 1 Go to Policy Groups and click + Create Group.

Step 2 Enter Group Name.

Step 3 Enter Description (Optional).

Step 4 Toggle Policy Status: Active or Inactive.

Step 5 Click Next, review details, then click Create Group.

Create a PolicyCopy Anchor Link

Step 1 General — Choose policy type, name, and assign a group.

Step 2 Definition — Write the policy YAML or host shell script.

Step 3 Review — Configure schedule and review before saving.

AI-Assisted Policy GenerationCopy Anchor Link

The AI-Assisted Policy Generation feature allows administrators to create governance and compliance policies using a built-in AI chatbot. Instead of manually writing policy definitions, users can describe their requirements in natural language and let the AI generate policy details automatically.

This capability helps accelerate policy creation, reduce manual effort, and ensure consistency across cloud governance controls.

OverviewCopy Anchor Link

The AI Policy Generator assists users in:

• Creating policies using natural language prompts.
• Generating policy names and descriptions.
• Drafting policy definitions and compliance rules.
• Reducing manual configuration effort.
• Accelerating governance implementation.
• Standardizing security and compliance policies.

The AI assistant can be accessed directly from the New Policy page using the integrated chat panel.

Accessing the AI Policy GeneratorCopy Anchor Link

To generate a policy using AI:

1. Navigate to Accounts → Governance → Policies.
2. Click Create New Policy.
3. Open the AI assistant panel located on the right side of the page.
4. Enter a policy requirement in natural language.
5. Review the generated policy draft.
6. Apply the generated content to the policy form.

Policy Drafting ModeCopy Anchor Link

The AI chatbot operates in Policy Drafting Mode, where it assists users in creating governance and compliance policies.

Users can provide instructions such as:

• Create an MFA enforcement policy.
• Create a security policy for public S3 buckets.
• Generate a policy to prevent open security groups.
• Create a compliance policy for resource tagging.
• Create a governance policy for unencrypted storage resources.

The AI interprets the requirement and generates policy recommendations automatically.

Example Policy RequestsCopy Anchor Link

Multi-Factor Authentication (MFA)Copy Anchor Link

Example prompt:

Create an MFA policy for AWS users.

The AI may generate:

• Policy Name
• Security category
• Severity level
• Compliance description
• Policy definition

Resource Tagging PolicyCopy Anchor Link

Example prompt:

Create a policy requiring all resources to have Environment and Owner tags.

The AI can generate governance controls that validate resource tagging compliance.

Storage Encryption PolicyCopy Anchor Link

Example prompt:

Create a policy to ensure all storage resources are encrypted.

The AI generates a compliance policy focused on encryption requirements.

Network Security PolicyCopy Anchor Link

Example prompt:

Create a policy to detect publicly accessible security groups.

The generated policy may include recommended detection and remediation criteria.

AI Generated Policy DetailsCopy Anchor Link

The AI can automatically populate policy information, including:

Users can review and modify generated content before saving the policy.

Reviewing Generated ContentCopy Anchor Link

After receiving an AI-generated draft:

1. Review the policy title.
2. Verify the policy description.
3. Validate severity and category assignments.
4. Examine the generated rule logic.
5. Modify any fields as required.
6. Continue through the policy creation workflow.

AI-generated content should always be reviewed before activation.

Example WorkflowCopy Anchor Link

1. Open New Policy.
2. Launch the AI assistant.
3. Enter a prompt such as:

Create an AWS policy that enforces MFA for all IAM users.

4. Review the generated policy draft.
5. Update fields if necessary.
6. Apply the generated content.
7. Complete the policy configuration wizard.
8. Save and activate the policy.

BenefitsCopy Anchor Link

The AI-Assisted Policy Generation feature enables administrators to:

• Create governance policies more efficiently.
• Generate policy content using natural language.
• Reduce policy authoring complexity.
• Improve governance consistency across environments.
• Accelerate compliance program implementation.
• Leverage AI recommendations for policy development.
• Simplify policy management for cloud administrators.

AI-Assisted Host Policy & Remediation Script GenerationCopy Anchor Link

The AI-Assisted Host Policy Generator enables administrators to create host compliance policies and automated remediation scripts using the built-in AI chatbot. Instead of manually writing shell scripts and compliance checks, users can describe their requirements in natural language and allow the AI to generate both the compliance policy and the associated remediation logic.

This feature helps organizations rapidly implement host security standards, hardening controls, and compliance requirements across managed servers.

OverviewCopy Anchor Link

The AI assistant supports the generation of:

• Host compliance policies
• Shell-based compliance checks
• Expected policy outputs
• Auto-remediation scripts
• Security hardening controls
• CIS benchmark validations
• Operating system compliance rules

AI-generated policies can be reviewed and customized before activation.

Creating a Host Policy with AICopy Anchor Link

To generate a host policy using AI:

1. Navigate to Accounts → Governance → Policies.
2. Click New Policy.
3. Select Host as the policy provider.
4. Click Draft with AI or open the AI chat assistant.
5. Enter the compliance requirement in natural language.
6. Review the generated policy details.
7. Validate the compliance script.
8. Configure scheduling settings.
9. Save and activate the policy.

Policy Drafting ModeCopy Anchor Link

The integrated chatbot operates in Policy Drafting Mode, where it assists administrators in creating host-level compliance policies.

The AI can automatically generate:

• Policy Name
• Category
• Severity
• Description
• Compliance Script
• Expected Output
• Remediation Script

Example Policy RequestsCopy Anchor Link

Disable Root SSH LoginCopy Anchor Link

Example Prompt:

Create a security policy to ensure root SSH login is disabled on Linux hosts.

The AI generates:

• Policy Name
• Security category
• Compliance validation script
• Expected output
• Remediation script

Example Expected Output:

PermitRootLogin no

Password Policy EnforcementCopy Anchor Link

Example Prompt:

Create a host policy to enforce strong password complexity requirements.

The AI may generate compliance checks that validate:

• Minimum password length
• Password complexity
• Password expiration settings
• Password history requirements

Disable Unused ServicesCopy Anchor Link

Example Prompt:

Create a policy to ensure telnet services are disabled on all Linux hosts.

The AI generates validation commands and remediation scripts to disable unauthorized services.

Audit Logging PolicyCopy Anchor Link

Example Prompt:

Create a compliance policy that verifies audit logging is enabled.

The AI can generate audit configuration validation and remediation procedures.

AI-Generated Compliance ScriptCopy Anchor Link

The Compliance Script validates whether a host complies with the desired policy.

PurposeCopy Anchor Link

Compliance scripts are used to:

• Inspect host configurations.
• Validate security settings.
• Verify compliance requirements.
• Detect policy violations.

Example ValidationCopy Anchor Link

For an SSH root login policy, the compliance script may:

grep 'PermitRootLogin' /etc/ssh/sshd_config

Expected Output:

PermitRootLogin no

When the expected output is returned, the host is considered compliant.

AI-Generated Remediation ScriptCopy Anchor Link

The AI assistant can also generate automatic remediation logic to correct non-compliant configurations.

The remediation script is displayed in the Auto-Remediation section.

Generate Remediation ScriptCopy Anchor Link

To generate a remediation script:

1. Create or generate a host policy.
2. Open the AI chat panel.
3. Request a remediation script.

Example:

Generate a remediation script for this policy.

The AI analyzes the policy and generates a corresponding remediation script.

Example Remediation RequestsCopy Anchor Link

Root Login RemediationCopy Anchor Link

Example Prompt:

Generate a remediation script to disable root SSH login.

The AI may generate a script that:

• Updates SSH configuration settings.
• Sets PermitRootLogin no.
• Reloads the SSH service.
• Verifies successful application.

Password Policy RemediationCopy Anchor Link

Example Prompt:

Generate a remediation script to enforce password complexity settings.

The AI may generate commands that:

• Update PAM configuration.
• Modify password policy settings.
• Apply required authentication controls.

Service Hardening RemediationCopy Anchor Link

Example Prompt:

Generate a remediation script to disable insecure services.

The AI may generate scripts to:

• Stop services.
• Disable automatic startup.
• Remove unnecessary packages.
• Verify remediation success.

Auto-RemediationCopy Anchor Link

The platform supports automated execution of remediation scripts whenever policy violations are detected.

To enable automatic remediation:

1. Turn on Auto-Remediation.
2. Review the generated remediation script.
3. Enable Execute script automatically on failure.
4. Save the policy.

When a host fails a compliance check:

• The remediation script runs automatically.
• The system attempts to restore compliance.
• Results are recorded in policy execution history.

Reviewing AI-Generated ContentCopy Anchor Link

Before activating any generated policy or remediation script, administrators should review:

Policy DetailsCopy Anchor Link

• Policy name
• Category
• Severity
• Description

Compliance LogicCopy Anchor Link

• Validation commands
• Expected outputs
• Compliance conditions

Remediation LogicCopy Anchor Link

• Configuration changes
• Service restarts
• Package modifications
• Command safety

Example WorkflowCopy Anchor Link

Step 1: Generate PolicyCopy Anchor Link

Enter:

Create a policy to disable root SSH login on Linux servers.

Step 2: Review Generated Compliance ScriptCopy Anchor Link

Verify:

• Compliance logic.
• Expected output.
• Severity level.

Step 3: Generate Remediation ScriptCopy Anchor Link

Enter:

Generate a remediation script for this policy.

Step 4: Review ScriptCopy Anchor Link

Ensure:

• Commands are correct.
• Services are properly restarted.
• Configuration changes match policy requirements.

Step 5: Enable Auto-RemediationCopy Anchor Link

Enable:

Execute script automatically on failure

Step 6: Save PolicyCopy Anchor Link

Complete the remaining policy setup steps and activate the policy.

10.5 SettingsCopy Anchor Link

Governance module settings are account-specific. You can enable or disable the module for a selected account to pause policy checks.