Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Store secrets for Helm deployments in Hashicorp Vault.

Manheim's Cloud Custodian (c7n) wrapper package, policy generator, runner, and supporting tools.