Compute the diff from the current resource to a previous version.
A resource matches the filter if a diff exists between the current resource and the selected revision.
Utilizes config as a resource revision database.
Revisions can be selected by date, against the previous version, and against a locked version (requires use of is-locked filter).
properties: selector: enum: - previous - date - locked selector_value: type: string type: enum: - json-diff required: - type
Permissions - config:GetResourceConfigHistory
Delete a cloudwatch alarm.
policies: - name: cloudwatch-delete-stale-alarms resource: alarm filters: - type: value value_type: age key: StateUpdatedTimestamp value: 30 op: ge - StateValue: INSUFFICIENT_DATA actions: - delete
properties: type: enum: - delete required: - type
Permissions - cloudwatch:DeleteAlarms