Policy file structure reference

Typical environment-level structure

version: 1.0.0
id: SimpleWebApp
name: Simple Web App
componentTypes: []
connectionOptions: []
configurations: {}
policies:
  CategoryName:
    - id: POLICY_ID
      description: Optional
      rules: []

Rule-level structure

- id: RULE_ID
  description: Optional
  stage: init
  target: component
  if:
    - eq: { key: someKey, value: someValue }
  then:
    - expect: { entity: component, control: someControl }

Notes

• Keep policies grouped by domain/category.
• Keep rule IDs deterministic and unique.
• Prefer IF/THEN style consistently.