cloud-custodian
cloud-custodian copied to clipboard
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Allows to use a different lambda handler. Pretty helpful in combination with lambda layers. For more details have a look at the issue linked to this PR. https://github.com/cloud-custodian/cloud-custodian/issues/7635
So that we can do something like ``` c7n-org run-script -s . -c my-projects.yml gcp_check_{region}.sh # or c7n-org run-script -s . -c my-projects.yml use_another_policy_result.sh {output_dir} ```
### Describe the bug ```bash-4.2# custodian run -s ~/log -r eu-west-1 workspaces.yaml 2022-05-10 16:22:59,328: custodian.output:ERROR Error while executing policy Traceback (most recent call last): File "/usr/local/lib/python3.7/site-packages/c7n/policy.py", line 290, in run...
### Describe the bug When searching for non-compliant vpc flow-logs I get an Exception when looking for a specific LogDestination (bucketname) if the policy hits a resource that has only...
### Describe the feature I would like to get the delete action and remove-statement action for secrets-manager resource, as they are not in there yet. ### Extra information or context...
### Describe the feature I would like to implement a KMS filter for the Secrets Manager resource since it does not exist yet ### Extra information or context _No response_
I am allowed to submit the bugfix via a forked repo to clear the CLA. Thus creating this PR and closing the old one https://github.com/cloud-custodian/cloud-custodian/pull/7103 For background information, please refer...
Adding a new filter for 'count'-ing the number of snapshots a RDS instance or RDS cluster resource has. The compliance reporting requires that all RDS ( cluster and instance )...
To create a Filter to flag route-table which is attached to a subnet that is not in the same availability zone (AZ) of the NAT Gateway subnet AZ. This filter...