cloud-custodian icon indicating copy to clipboard operation
cloud-custodian copied to clipboard

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Results 656 cloud-custodian issues
Sort by recently updated
recently updated
newest added

### Describe the feature There have been several users asking in Gitter and other channels for an action to make a public Elasticsearch domain private. There is currently no action...

kind/enhancement

### Describe the feature Add AWS Lake Formation to cloud-custodian ### Extra information or context We have two use cases here: There is one use case where we are supposed...

kind/enhancement

closes: https://github.com/cloud-custodian/cloud-custodian/issues/7188 Sample Policy: ```yaml policies: - name: copy-from-instance-profile resource: aws.ec2 actions: - type: copy-related-tag resource: resourcegroupstaggingapi skip_missing: true key: "IamInstanceProfile.Arn" tags: '*' - name: copy-from-tag resource: aws.ec2 actions: -...

start of route filter for filtering resources by networking routes.

Because the existing version only considers the last period of metrics data, see below code, the period property is not fully enabled and could be problematic. ``` elif self.op(collected_metrics[key][0][self.statistics], self.value):...

### Describe the feature New feature in AWS snapshots are storage tiering for cost optimization. You can move snapshots to archival and save money. Would love this in Cloud Custodian....

kind/enhancement

Fulfills https://github.com/cloud-custodian/cloud-custodian/issues/7099 This PR enables the use of [DataCatalog's catalog search](https://cloud.google.com/data-catalog/docs/reference/rest/v1beta1/catalog/search) to provide a scope and an optional query to filter out GCP resources according to various data catalog fields,...

### Describe the feature This is a request to add Custodian support for Data Catalog as a base filter. GCP allows you to create [tag templates](https://cloud.google.com/data-catalog/docs/tags-and-tag-templates) in Data Catalog, providing...

kind/enhancement

AWS recently added support for triggering Lambda with SQS as an event source, updating the mailer to trigger off of the event source rather than a 5 minute timer would...

kind/enhancement
area/tools
cloud/aws

### Describe the feature I would like to be able to filter workspace directories based on if the directories are using connection aliases ### Extra information or context _No response_

kind/enhancement