aws.mirror-session
Filters
json-diff
Compute the diff from the current resource to a previous version.
A resource matches the filter if a diff exists between the current resource and the selected revision.
Utilizes config as a resource revision database.
Revisions can be selected by date, against the previous version, and against a locked version (requires use of is-locked filter).
Permissions - config:GetResourceConfigHistory
Actions
delete
Action to delete traffic mirror session(s)
- example:
policies:
- name: traffic-mirror-session-paclength
resource: mirror-session
filters:
- type: value
key: tag:Owner
value: xyz
actions:
- delete
Permissions - ec2:DeleteTrafficMirrorSession
rename-tag
Rename an existing tag key to a new value.
- example:
rename Application, and Bap to App, if a resource has both of the old keys then we’ll use the value specified by Application, which is based on the order of values of old_keys.
policies: - name: rename-tags-example resource: aws.log-group filters: - or: - "tag:Bap": present - "tag:Application": present actions: - type: rename-tag old_keys: [Application, Bap] new_key: App
Permissions - tag:TagResources, tag:UntagResources