In today’s fast-paced cloud environments, securing and maintaining compliance across infrastructure-as-code (IaC) is a priority for every organization. As cloud adoption grows, so does the complexity of managing security and compliance. Resourcely’s Campaigns feature is designed to help organizations enforce guardrails, track compliance, and drive remediation efforts at scale, making it easier for both administrators and developers to meet security standards.
What Are Resourcely Campaigns?
Resourcely Campaigns are designed to help administrators ensure all infrastructure resources comply with predefined guardrails, which function as security and compliance policies. By activating a campaign, admins can enforce these policies across selected repositories and configuration routes. This prevents misconfigurations from becoming security risks, ensuring infrastructure remains secure and compliant.
Key Features of Campaigns
1. Targeted Enforcement
Campaigns offer precision in policy application. Admins can target specific repositories or config routes rather than applying rules globally, ensuring compliance only where it's needed. This targeted enforcement prevents unnecessary disruptions and focuses efforts on the most relevant areas.
2. Customizable Guardrails
Resourcely allows campaign managers to choose one or more Guardrails to enforce within a campaign. These guardrails might include:
- Enabling versioning for all storage buckets
- Requiring Terraform modules to be upgraded to specific versions
- Ensuring public access is blocked across all cloud resources
3. Terraform Version Detection
Keeping infrastructure up to date is critical. Campaigns detect Terraform Core and Terraform Provider versions, blocking pull requests (PRs) if they are out of date. This ensures that teams always build on approved versions, reducing security vulnerabilities and compatibility issues.
4. Comprehensive Burndown Charts
To keep track of progress and identify bottlenecks in remediation efforts, Resourcely provides burndown charts that visualize the resolution of compliance issues. This enables teams to track how quickly issues are being addressed and improve overall compliance efforts.
5. Remediation at Scale
Once a campaign is activated, developers will see a new Remediation tab that provides:
- A centralized dashboard of campaign results
- Clear guidance on how to fix detected violations
- Filtering capabilities so teams can focus on their specific repositories and configurations
Explore real-world Use Cases to see how you can enforce compliance effectively and remediate policy violations at scale. 🔍 Check Them Out
6. Plan-Based Verification
A key innovation in Resourcely Campaigns is plan-based remediation checks. Instead of merely checking the code, campaigns verify that the issue is actually fixed by running a Terraform plan.
- A draft pull request is automatically created
- CI/CD pipelines execute the Terraform plan to confirm that the issue is resolved
- The remediation status remains pending until changes are applied and the state file is refreshed
This approach ensures that compliance is not just theoretical, but actually enforced in production environments.
Campaigns Agent: Powering Compliance
To unlock the full potential of Resourcely Campaigns, you’ll need the Campaigns Agent—a robust tool that ensures your compliance checks run smoothly. Here’s how the Campaigns Agent powers compliance:
Targeted Repo Scoping
Resourcely allows you to select specific repositories to apply guardrails, enabling more granular control over where compliance policies are enforced. This feature is invaluable for organizations managing multiple teams and projects, allowing for seamless policy enforcement without causing unnecessary friction.
State File Support Across Platforms
The Campaigns Agent offers robust state file support, ensuring your infrastructure is accurately tracked across various storage options. By supporting Terraform state files from multiple providers, the agent helps you maintain a consistent and reliable view of your infrastructure’s state, allowing for better enforcement of guardrails and compliance checks. Here’s how you can integrate state files with different storage backends:
- S3: Store your Terraform state files on Amazon S3 and leverage Resourcely’s Campaigns Agent to manage and track infrastructure changes efficiently. Learn more about S3 state file support here.
- Google Cloud Storage (GCS): For users leveraging Google Cloud, the GCS integration provides robust support for managing your state files on Google Cloud. Find out how to integrate GCS with state files here.
- HCP Terraform: Users of HashiCorp Cloud Platform (Terraform Cloud or Terraform Enterprise) can utilize HCP Terraform to store their state files, ensuring a seamless experience with Resourcely’s compliance checks. Learn more about using HCP Terraform with state files here.
- Spacelift: For teams using Spacelift, the Campaigns Agent supports integrating Spacelift's state management, allowing you to enforce compliance while working with Spacelift-managed Terraform environments. Learn how to integrate Spacelift with state files here.
This state file integration guarantees that your compliance checks are based on accurate and up-to-date infrastructure states, giving you confidence in your environment’s security posture.
Resourcely Campaigns can integrate with any Terraform state backends through the Campaigns Agent, ensuring seamless compliance enforcement; if a backend is missing, contact Resourcely for support.
Effortless Integration with CI/CD Pipelines
With the Campaigns Agent, you can integrate GitHub Actions into your CI/CD pipeline, automating the process of running campaigns directly from your repositories. This ensures that compliance checks become an inherent part of your development flow, catching issues early in the process and ensuring that your infrastructure is always up to standard. Learn how to seamlessly run campaigns with GitHub Actions here.
Local Testing for Pre-Production Confidence
Before applying changes to production, you can run campaigns locally to test for compliance. The Campaigns Agent supports local execution, allowing developers to validate infrastructure changes and fix issues early, without waiting for deployment. This capability is invaluable for ensuring that changes meet compliance standards before they are applied at scale. Learn how to run campaigns locally here.
The Role of Campaign Managers
Campaigns are typically managed by admins or campaign managers, who define the scope and rules for each initiative. These individuals ensure that guardrails are properly enforced and work closely with developers to drive remediation efforts efficiently. They can:
- Create and modify campaigns as needed
- Monitor progress via burndown charts
- Filter and assign remediation tasks to specific teams
Ensuring a Secure, Compliant Future
Resourcely Campaigns empower organizations to proactively enforce compliance, streamline remediation, and improve infrastructure governance. By providing targeted enforcement, real-time verification, and detailed tracking, Campaigns make it easier than ever to maintain security and operational efficiency in cloud environments.
Ready to remediate policy violations in your existing infrastructure?
Get started now with our quickstart guide and take control of your compliance efforts! Start Here
