Cloud Custodian

Cloud Custodian is an open source rules engine for managing public cloud environments, across AWS, Azure, and GCP. Thousands of companies use it to ensure security of their environment as well to manage costs, and governance policies. It's written in python and provides a YAML based DSL for filtering and taking action on cloud provider resources, and integrates with serverless runtimes for real time event based execution. Its like getting a set of lego bricks you can use as a swiss army knife to solve your organization's cloud management challenges.