Cloud Custodian

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Cloud Custodian is ranked #6 of 22 in cloud governance software on Inferse. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan.

Compared on cloud governance software

Free plan: Yescloudcustodian.io

Facts

Purpose: Cloud Custodian manages cloud resources by filtering and tagging them, then applying actions through policies written in a YAML domain specific language.cloudcustodian.io · 29 Sept 2026
Security and cost: It supports security policy enforcement, compliance, tag policies, cleanup of unused resources, and cost management.cloudcustodian.io · 29 Sept 2026
Cloud providers: The documentation describes policy support for AWS, Azure, and Google Cloud Platform resources.cloudcustodian.io · 29 Sept 2026
Beta and alpha support: The homepage says Kubernetes, Tencent Cloud, and OpenStack support is in beta, while Terraform integration is currently in alpha.cloudcustodian.io · 29 Sept 2026
Policy controls: Policies specify a resource type, filters to narrow resources, and actions to apply to matching resources.cloudcustodian.io · 29 Sept 2026
Enforcement: Cloud Custodian integrates with provider serverless features to enforce policies in response to events, and can also run as a cron job on a server.cloudcustodian.io · 29 Sept 2026
Policy preview: Users can validate policies and run them in dry-run mode to see matching resources without executing actions.cloudcustodian.io · 29 Sept 2026
Metrics and records: Runs can produce policy metrics, structured resource records, and logs for cloud provider metrics, storage, and logging services.cloudcustodian.io · 29 Sept 2026
Integration examples: Documented event integrations include AWS CloudWatch Events and Config Rules, Azure EventGrid, and GCP AuditLog and Pub/Sub.cloudcustodian.io · 29 Sept 2026
Deployment options: The project documents installation on Linux, macOS, and Windows, and running through Docker or Kubernetes; its homepage also describes local, instance, and AWS Lambda execution.cloudcustodian.io · 29 Sept 2026
Security reporting: The project asks people to report security vulnerabilities to its security team at [email protected] and says it will acknowledge reports by email.github.com · 29 Sept 2026
Community support: The project points users to Slack, a mailing list, GitHub discussions, and community meetings that are open to users and developers of every skill level.cloudcustodian.io · 29 Sept 2026
Notable execution limit: The AWS documentation says event-triggered policies can run only in the same region and account, while periodic policies may run in a different region and account.cloudcustodian.io · 29 Sept 2026
Maker and history: The site identifies the project as a community project and states that it was accepted to CNCF on June 25, 2020; it does not state a headquarters or founding date.cncf.io · 29 Sept 2026