Bridegecrew

Platform
Pricing
Customers
Resources
Sign in
Sign Up

Bridegecrew Documentation

Welcome to the Bridegecrew. You'll find comprehensive guides and documentation to help you start working with Bridegecrew as quickly as possible, as well as support if you get stuck. Let's go!

HomeDocumentationAPI ReferenceReferenceChangelogDiscussionsPage Not FoundSearch{{ state.current().meta.title }}API LogsTutorials

Welcome

What is Bridgecrew?
Terms & Concepts
Prerequisites
Quick Start

Basics

Sign Up
Integrate with Cloud Provider
Integrate with Kubernetes
Integrate with Code Repository
Investigate Incidents
Take Action on Incidents
Continuous Assurance

Advanced Setup

Custom Policies
- Understanding Custom Policies
- Building Custom Policies
User Management
Connect to Bridgecrew CLI
Get API Token
Integrate with CI/CD
Scan AWS CDK CloudFormation templates
Set Up SSO Access
- SAML SSO - OneLogin
- SAML SSO - Okta
Set Up Notifications

AWS Policies

AWS Policy Index
General Policies
IAM Policies
Kubernetes Policies
Logging Policies
Networking Policies
Public Policies
Elasticsearch Policies
Monitoring Policies
S3 Policies
Secrets Policies
Serverless Policies

Kubernetes Policies

Kubernetes Policy Index

Azure Policies

Azure Policy Index
General Policies
IAM Policies
- Enable Register with Azure Active Directory on App Service
- Do not Create Custom Subscription Owner Roles
Kubernetes Policies
Logging Policies
Networking Policies
Secrets Policies
- Set an Expiration Date on All Secrets
- Ensure that no sensitive credentials are exposed in VM custom_data
Storage Policies
- Ensure Secure Transfer Required is Enabled

Google Cloud Policies

Google Cloud Policy Index
General Policies
IAM Policies
Kubernetes Policies
Logging Policies
- Enable VPC Flow Logs for VPC Network Subnets
Networking Policies
Public Policies
- Ensure Cloud Storage Bucket is Not Anonymously or Publicly Accessible
- Ensure Compute Instances Do Not Have Public IP Addresses
Google Cloud Storage Policies
- Encrypt Google Storage Buckets
- Enable Uniform Bucket-Level Access on Cloud Storage Buckets

Welcome

What is Bridgecrew?
Terms & Concepts
Prerequisites
Quick Start

Basics

Sign Up
Integrate with Cloud Provider
Integrate with Kubernetes
Integrate with Code Repository
Investigate Incidents
Take Action on Incidents
Continuous Assurance

Advanced Setup

Custom Policies
- Understanding Custom Policies
- Building Custom Policies
User Management
Connect to Bridgecrew CLI
Get API Token
Integrate with CI/CD
Scan AWS CDK CloudFormation templates
Set Up SSO Access
- SAML SSO - OneLogin
- SAML SSO - Okta
Set Up Notifications

AWS Policies

AWS Policy Index
General Policies
IAM Policies
Kubernetes Policies
Logging Policies
Networking Policies
Public Policies
Elasticsearch Policies
Monitoring Policies
S3 Policies
Secrets Policies
Serverless Policies

Kubernetes Policies

Kubernetes Policy Index

Azure Policies

Azure Policy Index
General Policies
IAM Policies
- Enable Register with Azure Active Directory on App Service
- Do not Create Custom Subscription Owner Roles
Kubernetes Policies
Logging Policies
Networking Policies
Secrets Policies
- Set an Expiration Date on All Secrets
- Ensure that no sensitive credentials are exposed in VM custom_data
Storage Policies
- Ensure Secure Transfer Required is Enabled

Google Cloud Policies

Google Cloud Policy Index
General Policies
IAM Policies
Kubernetes Policies
Logging Policies
- Enable VPC Flow Logs for VPC Network Subnets
Networking Policies
Public Policies
- Ensure Cloud Storage Bucket is Not Anonymously or Publicly Accessible
- Ensure Compute Instances Do Not Have Public IP Addresses
Google Cloud Storage Policies
- Encrypt Google Storage Buckets
- Enable Uniform Bucket-Level Access on Cloud Storage Buckets

Only admins can see thisEnable it for everyone

Integrate with Cloud Provider

Bridgecrew Cloud integrates with:

AWS
Google Cloud Platform
Microsoft Azure

Updated about a month ago

Integrate with Cloud Provider

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.