pulumi policy analyze can analyze an exported state file
Introduced 2026-07-01 · score 0.96
HOW TO USE IT
When analyzing exported Pulumi state without a stack or backend login, run `pulumi policy analyze` with `--file` pointing to the state file and a local policy pack.
pulumi policy analyze --file <state-file> --policy-pack <policy-pack-path>WHY THIS HELPS
When analyzing a repository's exported Pulumi state without a stack or backend login, pass the state file to policy analysis.
REQUIREMENTS AND LIMITATIONS
- Version: 3.249.0
- --file <state-file> (required): Analyze a state file produced by `pulumi stack export` instead of a live stack; this file workflow does not require a stack or backend login.
- --policy-pack <policy-pack-path> (required): Path to a policy pack to run during analysis; command analyzes against one or more local policy packs.
- Prerequisite: Use a state file produced by `pulumi stack export` and provide a local policy pack.
- The file must be a state file produced by `pulumi stack export`.
- The stated workflow does not require a stack or backend login.
FIRST-PARTY EVIDENCE
- https://github.com/pulumi/pulumi/releases/tag/v3.249.0
- https://www.pulumi.com/docs/iac/cli/commands/pulumi_policy_analyze/
Check the installed version and the source before using it. Entry JSON