cloud-custodian
cloud-custodian copied to clipboard
cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
### Describe the bug I am not able to use defined variables as integer values in policy files. The solution that was provided here https://github.com/cloud-custodian/cloud-custodian/issues/6734#issuecomment-867604128 is not working: "{min-size}" -->...
### Describe the bug I have configured offhour policy to start and stop EC2 instances. The policy is deployed as a Lambda function triggered by Event Bridge rules. The Event...
The resource manager says it `has_arn` but doesn't implement `get_arns`. I'm fairly sure that this is because it doesn't inherit from the QueryResourceManager. Not sure where or how to test,...
### Describe the feature We have a policy to copy Ec2 instance tags to its attached EBSvolumes. The policy works fine, but I need to skip if tags already exist...
### Describe the bug @kapilt When I try to install cloud custodian for azure I am getting the error "ERROR: Could not build wheels for backports.zoneinfo, which is required to...
**Describe the bug** I am trying to copy tags from rds-cluster to the instances in the cluster with the following policy: ```yaml policies: - name: rds-copy-cluster-tags-to-instance resource: rds filters: -...
The primary change here is explicitly importing [JsonDiff](https://github.com/ajkerrigan/cloud-custodian/blob/d2f6bbc9206ec2b35def7439dcc87e62e9c2d027/c7n/filters/revisions.py#L157) early so that it can apply itself to applicable resources as they register themselves. However while testing that change I noticed some...
### Describe the feature AWS recently expanded [S3 bucket ownership controls](https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-s3-object-ownership-simplify-access-management-data-s3/) so they can now be used to disable bucket ACLs. This will be a useful change for detecting and...
https://github.com/cloud-custodian/cloud-custodian/blob/50b1ee560dc833947176b1c094c9273317d9795b/tools/c7n_mailer/c7n_mailer/utils_email.py#L59 The logic of the is_email function is incomplete, some invalid email addresses can not be recognized. like "good.luck@custodian" will be treated as a valid email. This will cause the...
There is currently a bug in the ingress filter on security group which fails to match any resource when specifying a list of cidr blocks with value_type cidr. This is...
Metadata
Owner
Metadata
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources