aws.firehose

Filters

• config-compliance

• event

• finding

• marked-for-op

• metrics

• ops-item

• value

Actions

• auto-tag-user

• copy-related-tag

• delete

• encrypt-s3-destination

• invoke-lambda

• invoke-sfn

• mark-for-op

• notify

• post-finding

• post-item

• put-metric

• remove-tag

• tag

• webhook

delete

Parent base class for filters and actions.

properties:
  type:
    enum:
    - delete
required:
- type

encrypt-s3-destination

Action to set encryption key a Firehose S3 destination

example

policies:
  - name: encrypt-s3-destination
    resource: firehose
    filters:
      - KmsMasterKeyId: absent
    actions:
      - type: encrypt-s3-destination
        key_arn: <arn of KMS key/alias>

properties:
  key_arn:
    type: string
  type:
    enum:
    - encrypt-s3-destination
required:
- key_arn