aws.firehose

Filters

• event

• finding

• metrics

• ops-item

• value

Actions

• delete

• encrypt-s3-destination

• invoke-lambda

• invoke-sfn

• notify

• post-finding

• post-item

• put-metric

• webhook

delete

properties:
  type:
    enum:
    - delete
required:
- type

encrypt-s3-destination

Action to set encryption key a Firehose S3 destination

example

policies:
  - name: encrypt-s3-destination
    resource: firehose
    filters:
      - KmsMasterKeyId: absent
    actions:
      - type: encrypt-s3-destination
        key_arn: <arn of KMS key/alias>

properties:
  key_arn:
    type: string
  type:
    enum:
    - encrypt-s3-destination
required:
- key_arn