Check for account ids that the service catalog portfolio is shared with
policies: - name: catalog-portfolio-cross-account resource: aws.catalog-portfolio filters: - type: cross-account
properties: type: enum: - cross-account whitelist: items: type: string type: array whitelist_from: additionalProperties: 'False' properties: expr: oneOf: - type: integer - type: string format: enum: - csv - json - txt - csv2dict headers: patternProperties: ? '' : type: string type: object url: type: string required: - url type: object required: - type
Permissions - servicecatalog:ListPortfolioAccess
Compute the diff from the current resource to a previous version.
A resource matches the filter if a diff exists between the current resource and the selected revision.
Utilizes config as a resource revision database.
Revisions can be selected by date, against the previous version, and against a locked version (requires use of is-locked filter).
properties: selector: enum: - previous - date - locked selector_value: type: string type: enum: - json-diff required: - type
Permissions - config:GetResourceConfigHistory
Action to delete a Service Catalog Portfolio
policies: - name: service-catalog-portfolio-delete resource: aws.catalog-portfolio filters: - type: cross-account actions: - delete
properties: type: enum: - delete required: - type
Permissions - servicecatalog:DeletePortfolio
Rename an existing tag key to a new value.
rename Application, and Bap to App, if a resource has both of the old keys then we’ll use the value specified by Application, which is based on the order of values of old_keys.
policies: - name: rename-tags-example resource: aws.log-group filters: - or: - "tag:Bap": present - "tag:Application": present actions: - type: rename-tag old_keys: [Application, Bap] new_key: App
properties: new_key: type: string old_key: type: string old_keys: items: type: string type: array type: enum: - rename-tag required: - type