Given two cwe rules determine if the configuration is the same. Name is already implied.

Given two schedules determine if the configuration is the same. Name is already implied.

Select and dispatch an object source for a bucket. Choices are bucket partition, inventory, or direct pagination.

process_cvm

Ensure the given identities are in the iam role bindings for the topic.

Verify the notification config exists. Returns the notification config name.

Ensure the log sink and its pub sub topic exist.

Expand each list of cidr, prefix list, user id group pair by port/protocol as an individual rule. The console ux automatically expand

expand any variables in the action to_from/cc_from fields.

Extract framework runtime variables that should remain unexpanded. Cloud Custodian's Policy.get_variables() returns a dict where some values

Extract the parent id out of the child resource metadata

Extract an subnet id from an error

Factory func for filters. data - policy config for filters manager - resource type manager (ec2, s3, etc)

Generator that returns the events

Query a set of resources.

Filter log groups by their creation date. Also sets group specific value for start to the minimum of creation date or start.

Filter days where the bucket already has extant export keys.

Filter log groups by shell patterns.

Filter out roles that match ignore conditions.

Filter log groups where the last write was before the start date.

Recursively find unexpanded variable references in policy data. This function identifies variable placeholders (e.g., {variable_name}) that remai

Azure REST API doesn't match the documentation and the python SDK fails to deserialize the response. This is a temporal worka

format message.

format message.

Fetch results from separate queue

Gather policy information from files

generateEnvs Get list of environment variables

Generates generic arn if ID is not already arn format.