cloud-custodian icon indicating copy to clipboard operation
cloud-custodian copied to clipboard

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Results 656 cloud-custodian issues
Sort by recently updated
recently updated
newest added

Allows to use a different lambda handler. Pretty helpful in combination with lambda layers. For more details have a look at the issue linked to this PR. https://github.com/cloud-custodian/cloud-custodian/issues/7635

So that we can do something like ``` c7n-org run-script -s . -c my-projects.yml gcp_check_{region}.sh # or c7n-org run-script -s . -c my-projects.yml use_another_policy_result.sh {output_dir} ```

### Describe the bug ```bash-4.2# custodian run -s ~/log -r eu-west-1 workspaces.yaml 2022-05-10 16:22:59,328: custodian.output:ERROR Error while executing policy Traceback (most recent call last): File "/usr/local/lib/python3.7/site-packages/c7n/policy.py", line 290, in run...

kind/bug

### Describe the bug When searching for non-compliant vpc flow-logs I get an Exception when looking for a specific LogDestination (bucketname) if the policy hits a resource that has only...

kind/bug

### Describe the feature I would like to get the delete action and remove-statement action for secrets-manager resource, as they are not in there yet. ### Extra information or context...

kind/enhancement

### Describe the feature I would like to implement a KMS filter for the Secrets Manager resource since it does not exist yet ### Extra information or context _No response_

kind/enhancement
area/filters
cloud/aws

I am allowed to submit the bugfix via a forked repo to clear the CLA. Thus creating this PR and closing the old one https://github.com/cloud-custodian/cloud-custodian/pull/7103 For background information, please refer...

Adding a new filter for 'count'-ing the number of snapshots a RDS instance or RDS cluster resource has. The compliance reporting requires that all RDS ( cluster and instance )...

To create a Filter to flag route-table which is attached to a subnet that is not in the same availability zone (AZ) of the NAT Gateway subnet AZ. This filter...