{"categories":[{"label":"Distributed Computing","url":"https://skillfed.io/packages/category/system-distributed-computing"},{"label":"Systems Administration","url":"https://skillfed.io/packages/category/system-systems-administration"}],"enrichment":{"capability":"Cloud Custodian is a rules engine that enforces cloud infrastructure policies across AWS, Azure, and GCP by defining filters and actions in YAML to manage compliance, security, and cost.","skillfed_tags":["cloud-compliance","policy-automation","multi-cloud"],"use_cases":["Enforce security compliance by automatically terminating EC2 instances with unencrypted volumes or removing cross-account S3 bucket access.","Manage costs by scheduling unused resources for deletion or stopping instances outside business hours across multiple accounts.","Validate infrastructure-as-code (Terraform, etc.) policies on developer workstations or in CI pipelines before deployment.","Apply consistent tagging policies across resources and stop instances that don't meet tag compliance requirements.","Monitor and report on resource compliance in real-time by integrating with CloudWatch Events, Config Rules, or cloud provider audit logs.","Automate garbage collection of orphaned or temporary resources across large existing cloud fleets."],"what_it_does":"Cloud Custodian is a policy engine that lets you define cloud infrastructure rules in simple YAML files and enforce them across AWS, Azure, and GCP. You write policies specifying resource types (like EC2 instances or S3 buckets), filters to match resources, and actions to take on them\u2014then run them on-demand, via cron, or as serverless functions triggered by cloud events. It consolidates ad-hoc cloud management scripts into a unified tool with built-in compliance checking, cost optimization, tagging enforcement, and real-time policy execution.\n\nThe package depends on boto3 for AWS, standard libraries like cryptography, jsonschema, and pyyaml for configuration parsing, and tabulate for output formatting. It's designed for teams managing large cloud fleets who need repeatable, auditable policy enforcement without writing custom code for each rule. Policies can run in dry-run mode first to preview what they would do, and results are stored in cloud-native object storage for reporting.","worth_installing":"Yes. Cloud Custodian is actively maintained, has no known vulnerabilities, installs with low friction, and is widely used (top 5000 PyPI packages). It's a mature CNCF Incubating project with permissive licensing suitable for enterprise use. Install it if you need to automate cloud compliance, security, or cost management across AWS, Azure, or GCP at scale."},"id":"c7n","links":{"html":"https://skillfed.io/packages/c7n","md":"https://skillfed.io/packages/c7n.md","pypi":"https://pypi.org/project/c7n/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-28","license_spdx":"Apache-2.0","license_treatment":"permissive","name":"c7n","python_support":"supports_current","summary":"Cloud Custodian - Policy Rules Engine"},"popularity":{"monthly_downloads":2047247,"position":3343,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.9.51"}