Custom rules
Custom rules allow you to customize CSPM and KSPM standard security rules for the in-house requirements.
To work with custom rules, you need the security-deck.rules.editor role or higher.
Note
To check rule compliance, add the rule to a new or existing custom rule set. Then check the workspace settings to make sure the rule set is active.
Custom rules in CSPM
Custom rules in CSPM are created based on a basic standard rule. A basic rule defines the verification logic you can supplement or modify.
The following settings are available:
- Editing a name and description.
- Changing severity.
- Supplementing or editing resolution guidelines.
- Editing configurable parameters specific to a basic rule.
Custom rules in KSPM
Custom rules in KSPM are created from scratch based on the internal security policies. As opposed to CSPM rules, they do not require a basic rule.
The following settings are available:
- Rule name and description.
- Check type: sets when to apply a rule. Currently, only the Admission option is supported: a rule applies when creating or changing a Kubernetes object.
- Rule severity.
- Guidelines on fixing violations.
- Policy rule YAML code.
By default, a new rule is created in the Audit mode. After creating a rule, you can change the mode.