> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies.md).

# Rules and Policies

- [About Rules and Policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/about-rules-and-policies.md): Discover how Cortex Cloud detects security risks across your infrastructure, workloads, and container images, and how policies automate the response.
- [Cloud security rules and policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies.md): Learn how to use Cortex Cloud Posture Management rules and policies to detect cloud risks and enforce controls.
- [Cloud security rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/cloud-security-rules.md): Learn how Cortex Cloud Posture Management cloud security rules detect risks across your environment.
- [Cloud security policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/cloud-security-policies.md): Learn how Cortex Cloud Posture Management cloud security policies apply rules to selected assets.
- [Create and manage cloud security rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules.md): Create and manage Cortex Cloud Posture Management cloud security rules to detect and prioritize risks.
- [Create a graph rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-graph-rule.md): Create graph rules in Cortex Cloud Posture Management to identify risky relationships and attack paths.
- [Create a configuration rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-configuration-rule.md): Create configuration rules in Cortex Cloud Posture Management to detect resource misconfigurations and policy violations.
- [Create a data rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule.md): Create data rules in Cortex Cloud Posture Management to detect data risks, malware, and classification issues.
- [Create an identity rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-identity-rule.md): Create identity rules in Cortex Cloud Posture Management to detect excessive or unused permissions.
- [Create a network exposure rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-network-exposure-rule.md): Create network exposure rules in Cortex Cloud Posture Management to detect risky network access.
- [Create an AI rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-ai-rule.md): Create AI rules in Cortex Cloud Posture Management to detect risks across your AI ecosystem.
- [Create an attack path (legacy) rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-attack-path-rule.md): Create legacy attack path rules in Cortex Cloud Posture Management to identify breach paths to high-value assets.
- [View cloud security rule status](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/view-cloud-security-rule-status.md): View and filter cloud security rule status in Cortex Cloud Posture Management.
- [Edit a cloud security rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/edit-a-cloud-security-rule.md): Edit cloud security rules in Cortex Cloud Posture Management and review their effect on related issues.
- [Enable or disable a rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/enable-or-disable-a-rule.md): Enable or disable Cortex Cloud Posture Management cloud security rules to control asset evaluations.
- [Use an existing rule to create a new one](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/use-an-existing-rule-to-create-a-new-one.md): Duplicate Cortex Cloud Posture Management cloud security rules to create tailored detections.
- [Delete a custom cloud security rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/delete-a-custom-cloud-security-rule.md): Delete unneeded custom cloud security rules in Cortex Cloud Posture Management.
- [Create and manage cloud security policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies.md): Create and manage Cortex Cloud Posture Management cloud security policies to apply rules to cloud assets.
- [Create a cloud security policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/create-a-cloud-security-policy.md): Create Cortex Cloud Posture Management cloud security policies to apply rules to selected cloud assets.
- [Edit a cloud security policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/edit-a-cloud-security-policy.md): Edit Cortex Cloud Posture Management cloud security policies to update their details, rules, and scopes.
- [Enable or disable a policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/enable-or-disable-a-policy.md): Enable or disable Cortex Cloud Posture Management cloud security policies to control enforcement.
- [Use an existing policy to create a new one](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/use-an-existing-policy-to-create-a-new-one.md): Duplicate Cortex Cloud Posture Management cloud security policies to create tailored policies.
- [Delete a custom cloud security policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/delete-a-custom-cloud-security-policy.md): Delete unneeded custom cloud security policies in Cortex Cloud Posture Management.
- [Cloud workload policies and rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules.md): Use Cortex Cloud Posture Management policies and rules to detect violations and enforce security controls.
- [How policies and rules work together](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/how-policies-and-rules-work-together.md): Learn how Cortex Cloud Posture Management policies enforce actions for violations detected by rules.
- [Cloud workload policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies.md): Use Cortex Cloud Posture Management cloud workload policies to detect, prevent, and manage security violations.
- [Types of cloud workload policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies.md): Explore Cortex Cloud Posture Management policy types for misconfigurations, malware, secrets, and trusted images.
- [Trusted image cloud workload policies](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies/types-of-cloud-workload-policies.md): Use Cortex Cloud Posture Management trusted image policies to enforce image trust and manage violations.
- [Cloud Workload Policies page](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page.md): Use Cortex Cloud Posture Management to view, filter, and manage cloud workload policies.
- [Enable or disable a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/enable-or-disable-a-cloud-workload-policy.md): Enable or disable Cortex Cloud Posture Management cloud workload policies to control their enforcement.
- [Create a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/create-a-cloud-workload-policy.md): Create Cortex Cloud Posture Management cloud workload policies to address security risks and compliance requirements.
- [Use an existing policy to create a new cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/use-an-existing-policy-to-create-a-new-cloud-workload-policy.md): Reuse a Cortex Cloud Posture Management cloud workload policy to create a new policy.
- [Edit a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/edit-a-cloud-workload-policy.md): Edit Cortex Cloud Posture Management cloud workload policies to update their settings.
- [Delete a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/delete-a-cloud-workload-policy.md): Delete Cortex Cloud Posture Management cloud workload policies that are no longer needed.
- [Cloud workload preventive action](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-preventive-action.md): Use Cortex Cloud Posture Management preventive actions to block violations and create issues.
- [Cloud workload rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules.md): Use Cortex Cloud Posture Management cloud workload rules to define criteria for detecting security violations.
- [Default (pre-defined) rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/default-pre-defined-rules.md): Review predefined Cortex Cloud Posture Management rules that detect cloud runtime security violations.
- [Custom (user-defined) rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/custom-user-defined-rules.md): Define custom Cortex Cloud Posture Management rules for tailored cloud workload security and compliance checks.
- [Cloud Workload Rules page](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page.md): Use Cortex Cloud Posture Management to view, filter, and manage cloud workload rules.
- [Create a new custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule.md): Create custom Cortex Cloud Posture Management detection rules for security and compliance requirements.
- [Use an existing rule to create a new custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/use-an-existing-rule-to-create-a-new-custom-detection-rule.md): Reuse a Cortex Cloud Posture Management rule to create a new custom detection rule.
- [Edit a custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/edit-a-custom-detection-rule.md): Edit Cortex Cloud Posture Management custom detection rules to update their settings.
- [Delete a custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/delete-a-custom-detection-rule.md): Delete Cortex Cloud Posture Management custom detection rules that are no longer needed.
- [Base image rules](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/base-images-rule.md): Learn how Cortex Cloud Posture Management base image rules map image lineage and vulnerabilities.
- [Create a base image rule](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/base-images-rule/create-a-base-images-rule.md): Create Cortex Cloud Posture Management base image rules to map derived images to foundational images.
- [Find the base image for an asset](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies/base-images-rule/prerequisites.md): Find an asset's foundational image and lineage in Cortex Cloud Posture Management.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/rules-and-policies.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.