aid: cloud-custodian url: https://raw.githubusercontent.com/api-evangelist/cloud-custodian/refs/heads/main/apis.yml name: Cloud Custodian tags: - Cloud Security - Compliance - Cost Optimization - Multi-Cloud - Policy as Code type: Index image: https://kinlane-productions2.s3.amazonaws.com/apis-json/apis-json-logo.jpg access: Open Source created: '2025-01-01' modified: '2026-04-27' position: Consumer kind: opensource description: >- Cloud Custodian is an open-source rules engine for cloud security, compliance, and cost-optimization governance now stewarded by Stacklet. Operators express policies as YAML files that select a cloud resource type, apply filters, and execute actions; the engine then runs those policies against AWS, Azure, and GCP via provider-specific plugins. Custodian does not expose a developer REST API of its own - integration is via the c7n CLI, the policy YAML schema, c7n-org for multi-account fan-out, and c7n-mailer for SQS-driven notifications. apis: - aid: cloud-custodian:cloud-custodian name: Cloud Custodian tags: - Cloud Security - Policy as Code humanURL: https://cloudcustodian.io/ properties: - url: https://cloudcustodian.io/docs/ type: Documentation - url: https://cloudcustodian.io/docs/quickstart/index.html type: GettingStarted - url: https://cloudcustodian.io/docs/overview/capabilities.html type: Reference - url: https://github.com/cloud-custodian/cloud-custodian type: GitHubRepository - type: JSONSchema url: json-schema/cloud-custodian-policy-schema.json description: >- Cloud Custodian provides rules-engine capabilities for managing cloud resources with security, compliance, and cost optimization policies. - aid: cloud-custodian:cloud-custodian-aws name: Cloud Custodian AWS Provider description: >- The Cloud Custodian AWS provider enables policy-as-code management of Amazon Web Services resources including EC2, S3, IAM, RDS, Lambda, and hundreds of other AWS service resource types. Policies can be run in multiple execution modes including serverless Lambda functions, AWS Config rules, and scheduled CloudWatch Events. humanURL: https://cloudcustodian.io/docs/aws/gettingstarted.html image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg properties: - url: https://cloudcustodian.io/docs/aws/gettingstarted.html type: GettingStarted - url: https://cloudcustodian.io/docs/aws/resources/index.html type: Reference - url: https://cloudcustodian.io/docs/aws/examples/index.html type: Documentation tags: - AWS - Cloud Security - Compliance - Policy as Code - aid: cloud-custodian:cloud-custodian-azure name: Cloud Custodian Azure Provider description: >- The Cloud Custodian Azure provider enables policy-as-code management of Microsoft Azure resources including virtual machines, storage accounts, network security groups, and other Azure services. Policies can enforce security requirements, tagging standards, and cost controls across Azure subscriptions. humanURL: https://cloudcustodian.io/docs/azure/gettingstarted.html image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg properties: - url: https://cloudcustodian.io/docs/azure/gettingstarted.html type: GettingStarted - url: https://cloudcustodian.io/docs/azure/policy/resources/index.html type: Reference tags: - Azure - Cloud Security - Compliance - Policy as Code - aid: cloud-custodian:cloud-custodian-gcp name: Cloud Custodian GCP Provider description: >- The Cloud Custodian GCP provider enables policy-as-code management of Google Cloud Platform resources including Compute Engine instances, GCS buckets, Cloud SQL instances, and other GCP services. Policies can be used to enforce security, compliance, and cost governance standards across GCP projects. humanURL: https://cloudcustodian.io/docs/gcp/gettingstarted.html image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg properties: - url: https://cloudcustodian.io/docs/gcp/gettingstarted.html type: GettingStarted - url: https://cloudcustodian.io/docs/gcp/resources/index.html type: Reference tags: - Cloud Security - Compliance - GCP - Policy as Code - aid: cloud-custodian:cloud-custodian-c7n-org name: Cloud Custodian C7n-Org description: >- c7n-org is a Cloud Custodian tool for running policies across multiple cloud accounts, projects, or subscriptions in parallel. It uses an accounts configuration file with assumed roles to orchestrate Custodian execution at scale across AWS Organizations, Azure subscriptions, or GCP projects. humanURL: https://cloudcustodian.io/docs/tools/c7n-org.html image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg properties: - url: https://cloudcustodian.io/docs/tools/c7n-org.html type: Documentation tags: - Cloud Security - Multi-Account - Orchestration - aid: cloud-custodian:cloud-custodian-c7n-mailer name: Cloud Custodian C7n-Mailer description: >- c7n-mailer is a Cloud Custodian notification tool that subscribes to an SQS queue populated by policy actions and sends notifications via SES email, Slack messages, or integrations with DataDog and Splunk. It enables teams to alert resource owners when Custodian policies detect policy violations. humanURL: https://cloudcustodian.io/docs/tools/c7n-mailer.html image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg properties: - url: https://cloudcustodian.io/docs/tools/c7n-mailer.html type: Documentation - type: AsyncAPI url: asyncapi/cloud-custodian-mailer-asyncapi.yml tags: - Alerting - Email - Notifications - Slack common: - type: Website url: https://cloudcustodian.io/ - type: Documentation url: https://cloudcustodian.io/docs/ - type: GitHubOrganization url: https://github.com/cloud-custodian/cloud-custodian - type: GettingStarted url: https://cloudcustodian.io/docs/quickstart/index.html - type: Community url: https://cloudcustodian.io/community/ - type: GitHubRepository url: https://github.com/cloud-custodian/cloud-custodian - type: ChangeLog url: https://github.com/cloud-custodian/cloud-custodian/releases - type: JSONLDContext url: json-ld/cloud-custodian-context.jsonld - type: JSONSchema url: json-schema/cloud-custodian-policy-schema.json - type: AsyncAPI url: asyncapi/cloud-custodian-mailer-asyncapi.yml - type: Naftiko Capabilities url: capabilities/cloud-custodian-capabilities.yml maintainers: - FN: Kin Lane email: kin@apievangelist.com specificationVersion: '0.19'