Gomboc provides you with a way to define your cloud security policy through a no-code language so that you can have a baseline of how your cloud should look like. We then integrate into your DevOps environment through GitHub to review your IaC (currently Terraform and CloudFormation. Support for Pulumi, Ansible, and more will be available in Q4 2023). We access your AWS environment through a security auditor role with access to configuration (read-only). Finally - after examining your IaC and actual configuration and aligning it to the policy, we identify any gaps and provide pull-requests that deliver tailored remediations to those gaps. These pull requests contain full documentation on why we are proposing these changes, what those changes are, and links to the corresponding cloud provider services we are proposing to change. Our scanning is triggered on a configurable action (proposed-pull requests and commits) so that your code and deployment are always reviewed and fixed as your DevOps continuously evolves your application.