Policy Validation Error

checker_config: - check_actions: only check one of the specified actions - everyone_only: only check for wildcard permission grants

Generic value filter using jmespath

dummy boto api error

Provides CRUD operations around lambda functions

Error running a Policy.

Wraps a custodian policy to turn it into a lambda function.

Provide fast validation and inspection of a policy file. Intent is to provide more humane validation for top level errors instead of printing

Retrieve values from a url. Supports json, csv and line delimited text files and expressions to retrieve a subset of values. Expression

A plugin registry Custodian is intended to be innately pluggable both internally and externally, for resource types and their filters and act

Policy Execution Context.

Policy collection supporting collection modifications.

Behaves exactly like the stdlib formatter, with one additional behavior. when a string has no format_spec and only contains a single expression,

Creates a zip file for python lambda functions. :param tuple modules: the Python modules to add to the archive Amazon doesn't give us straig

Test cache implementation for verifying caching behavior.

Custom source for Microsoft Graph API resources. This source integrates with Cloud Custodian's filtering framework while using Microsoft Grap

Version numbering for anarchists and software realists. Implements the standard interface for version number classes as described above. A ve

Session

Attempts to tag a resource with the first user who created/modified it. :example: This policy will tag all existing resource groups with the

Base class for API repository for a specified Cloud API.

Calls a webhook with optional parameters and body populated from JMESPath queries. .. code-block:: yaml policies:

A policy that runs/executes in azure functions.

Supports metrics filters on resources. Docs on cloud monitor metrics https://www.tencentcloud.com/document/product/248 :example: ..

Policy that tracks its file origin.

Filters storage accounts based on service-specific metrics. Azure Storage Accounts expose service-specific metrics for blob, queue, table, an

Generic value filter on resources' IAM policy bindings using jmespath :example: Filter all kms-cryptokeys accessible to all users or all

Patches a Kubernetes resource with enhanced capabilities Supports save/restore functionality for off-hours resource management and impro

Support clearing annotations set within a block filter. See https://github.com/cloud-custodian/cloud-custodian/issues/2116

Python Log Handler to Send to Cloud Watch Logs https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.html

Action to modify the SKU type of Azure managed disks. **Key Features**: - **Parallel Processing**: Handles unattached and attache

References a policy change within a given commit.

QueryResourceManager

Diff two versions of a security group Immutable: GroupId, GroupName, Description, VpcId, OwnerId Mutable: Tags, Rules

Set Firewall Rules Action Updates Azure Storage Firewalls and Virtual Networks settings. By default the firewall rules are appended with

Attempts to tag a resource with the date when resource was created. This action searches from the earliest 'write' operation's caller in

Subscribe a lambda to bucket notifications directly.

Subscribe a lambda to cloud watch events. Cloud watch events supports a number of different event sources, from periodic timers with cron syn

Action to encrypt unencrypted S3 objects :example: .. code-block:: yaml policies: - name: s3-encrypt-objects

Base class for Microsoft Graph API resources. Provides common Graph API client functionality for all EntraID resources.

Invalid configuration for an output

Identify shadow trails (secondary copies), shadow trails can't be modified directly, the origin trail needs to be modified. Shadow trails are

Composite as a log sink subscriber = LogSubscriber(dict( log='projects/custodian-1291/logs/cloudaudit.googleapis.com%2Factivity')) f