Ask HN: What tool(s) do you use to enforce organization IaC standards?

I assume IaC compliance is more popular in large enterprises, but I'm curious how widespread this is and how people are going about selecting whichever tool they use.

For example, a couple companies that seem to do this are Fugue[1] and Prancer[2]. McKinsey Cloud also seems to have purchased a company called Candid Cloud, which had a similar product called the Matter Compliance Engine[3], but McKinsey seems to have tried to obliterate all traces of them from the web and unfortunately the site the old URL redirects to really doesn't provide any concrete product information.

[1]: https://www.fugue.co/

[2]: https://www.prancer.io/

[3]: https://matter.cloud/