policyset

PolicySet is a construct used in policy governance systems to group related policies into a single, manageable unit. It serves as a logical container that enables organizations to apply, version, and audit a collection of rules or constraints as a cohesive package.

A PolicySet typically includes metadata (name, description, scope, policy set version), references to individual policies or policy templates, evaluation order or precedence, and enforcement mode (enforce, audit, or monitor). It may also declare dependencies, parameter bindings, and the resources or environments to which it applies.

Lifecycle: creation, review, approval, staging, deployment, monitoring, and deprecation; changes are versioned and audited.

Usage: used to implement governance across cloud accounts, applications, or clusters; can simplify rollouts of security baselines; supports multi-policy composition; helps audit trails.

In policy engines, a PolicySet is evaluated by running its constituent policies against resources; results are aggregated into a single report or policy decision. It supports templating and reuse of policy components.

See also: policy as code, policy engine, compliance.