Filters elasticache snapshots based on their age (in days)
policies: - name: elasticache-stale-snapshots resource: cache-snapshot filters: - type: age days: 30 op: ge
properties: days: type: number op: enum: - eq - equal - ne - not-equal - gt - greater-than - ge - gte - le - lte - lt - less-than - glob - regex - regex-case - in - ni - not-in - contains - difference - intersect type: enum: - age required: - type
Action to delete elasticache snapshots
To prevent unwanted deletion of elasticache snapshots, it is recommended to apply a filter
policies: - name: delete-elasticache-stale-snapshots resource: cache-snapshot filters: - type: age days: 30 op: ge actions: - delete
properties: type: enum: - delete required: - type
Permissions - elasticache:DeleteSnapshot
Rename an existing tag key to a new value.
rename Application, and Bap to App, if a resource has both of the old keys then we’ll use the value specified by Application, which is based on the order of values of old_keys.
policies: - name: rename-tags-example resource: aws.log-group filters: - or: - "tag:Bap": present - "tag:Application": present actions: - type: rename-tag old_keys: [Application, Bap] new_key: App
properties: new_key: type: string old_key: type: string old_keys: items: type: string type: array type: enum: - rename-tag required: - type