CloudCustodian Rules engine for cloud security and governance, DSL in yaml for policies to query, filter, and take actions on resources - View it on GitHub