aws.network-addr

Filters

• config-compliance

• event

• finding

• json-diff

• marked-for-op

• ops-item

• shield-enabled

• tag-count

• value

json-diff

Compute the diff from the current resource to a previous version.

A resource matches the filter if a diff exists between the current resource and the selected revision.

Utilizes config as a resource revision database.

Revisions can be selected by date, against the previous version, and against a locked version (requires use of is-locked filter).

properties:
  selector:
    enum:
    - previous
    - date
    - locked
  selector_value:
    type: string
  type:
    enum:
    - json-diff
required:
- type

shield-enabled

properties:
  state:
    type: boolean
  type:
    enum:
    - shield-enabled
required:
- type

Actions

• auto-tag-user

• copy-related-tag

• invoke-lambda

• invoke-sfn

• mark-for-op

• normalize-tag

• notify

• post-finding

• post-item

• put-metric

• release

• remove-tag

• rename-tag

• set-shield

• tag

• tag-trim

• webhook

release

Action to release elastic IP address(es)

Use the force option to cause any attached elastic IPs to also be released. Otherwise, only unattached elastic IPs will be released.

example

policies:
  - name: release-network-addr
    resource: network-addr
    filters:
      - AllocationId: ...
    actions:
      - type: release
        force: True

properties:
  force:
    type: boolean
  type:
    enum:
    - release
required:
- type

set-shield

Enable shield protection on applicable resource.

setting sync parameter will also clear out stale shield protections for resources that no longer exist.

properties:
  state:
    type: boolean
  sync:
    type: boolean
  type:
    enum:
    - set-shield
required:
- type