cloud-custodian
cloud-custodian copied to clipboard
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
### Describe the feature There have been several users asking in Gitter and other channels for an action to make a public Elasticsearch domain private. There is currently no action...
### Describe the feature Add AWS Lake Formation to cloud-custodian ### Extra information or context We have two use cases here: There is one use case where we are supposed...
closes: https://github.com/cloud-custodian/cloud-custodian/issues/7188 Sample Policy: ```yaml policies: - name: copy-from-instance-profile resource: aws.ec2 actions: - type: copy-related-tag resource: resourcegroupstaggingapi skip_missing: true key: "IamInstanceProfile.Arn" tags: '*' - name: copy-from-tag resource: aws.ec2 actions: -...
start of route filter for filtering resources by networking routes.
Because the existing version only considers the last period of metrics data, see below code, the period property is not fully enabled and could be problematic. ``` elif self.op(collected_metrics[key][0][self.statistics], self.value):...
### Describe the feature New feature in AWS snapshots are storage tiering for cost optimization. You can move snapshots to archival and save money. Would love this in Cloud Custodian....
Fulfills https://github.com/cloud-custodian/cloud-custodian/issues/7099 This PR enables the use of [DataCatalog's catalog search](https://cloud.google.com/data-catalog/docs/reference/rest/v1beta1/catalog/search) to provide a scope and an optional query to filter out GCP resources according to various data catalog fields,...
### Describe the feature This is a request to add Custodian support for Data Catalog as a base filter. GCP allows you to create [tag templates](https://cloud.google.com/data-catalog/docs/tags-and-tag-templates) in Data Catalog, providing...
AWS recently added support for triggering Lambda with SQS as an event source, updating the mailer to trigger off of the event source rather than a 5 minute timer would...
### Describe the feature I would like to be able to filter workspace directories based on if the directories are using connection aliases ### Extra information or context _No response_