Pulumi CLI adds policy analyze command
Introduced 2026-04-02 · score 0.94
HOW TO USE IT
When analyzing an existing stack against a policy pack, run `pulumi policy analyze` with the pack path and, if needed, the stack name.
pulumi policy analyze --policy-pack <policy-pack-path> [--stack <stack-name>]WHY THIS HELPS
Analyze an existing stack's state against a policy pack.
REQUIREMENTS AND LIMITATIONS
- Version: 3.229.0
- --policy-pack <path> (required): Path to a policy pack to run during analysis; repeat for multiple packs.
- --stack <name>: Stack to analyze; defaults to the current stack.
- Prerequisite: Use Pulumi CLI v3.229.0 or later; the command was added in v3.229.0.
- The command runs a policy pack against existing state.
- Docs conflict: The current CLI reference is generated for v3.264.0 and includes `--file`. Pulumi's release notes say `--file` was added in v3.258.0, so it is not included as a v3.229.0 option.
FIRST-PARTY EVIDENCE
- https://github.com/pulumi/pulumi/releases/tag/v3.229.0
- https://www.pulumi.com/docs/iac/cli/commands/pulumi_policy_analyze/
Check the installed version and the source before using it. Entry JSON