# IaC update-exclude-policy

## Usage

`snyk iac update-exclude-policy [<OPTIONS>]`

## Description

The `snyk iac update-exclude-policy` generates exclude policy rules to be used by `snyk iac describe`.

For a list of related commands see the [snyk iac](https://docs.snyk.io/developer-tools/snyk-cli/commands/iac) help; `iac --help`

For more information, see [Ignore resources](https://docs.snyk.io/scan-with-snyk/snyk-iac/detect-drift-and-manually-created-resources/ignore-resources-for-drift)

## Exit codes

Possible exit codes and their meaning:

**0**: success, exclude rules generated successfully\
**1**: error, something wrong happened during exclude rules generation

## Configure the Snyk CLI

You can use environment variables to configure the Snyk CLI and set variables for connecting with the Snyk API. See [Configure the Snyk CLI](https://docs.snyk.io/snyk-cli/configure-the-snyk-cli)

## Debug

Use the `-d` option to output the debug logs.

## Options

### `--exclude-missing`

Exclude missing resources.

### `--exclude-unmanaged`

Exclude resources not managed by IaC.

## Example

```
$ snyk iac describe --json | snyk iac update-exclude-policy
```