aws.rds-cluster-param-group¶

Resource manager for RDS cluster parameter groups.

Filters¶

config-compliance

event

finding

list-item

marked-for-op

metrics

ops-item

reduce

value

Actions¶

auto-tag-user

copy

copy-related-tag

delete

invoke-lambda

invoke-sfn

mark-for-op

modify

notify

post-finding

post-item

put-metric

remove-tag

rename-tag

tag

webhook

copy¶

Action to copy an RDS cluster parameter group.

example:

policies:
  - name: rds-cluster-param-group-copy
    resource: rds-cluster-param-group
    filters:
      - DBClusterParameterGroupName: original_cluster_pg_name
    actions:
      - type: copy
        name: copy_name

properties:
  description:
    type: string
  name:
    type: string
  type:
    enum:
    - copy
required:
- name
- type

Permissions - rds:CopyDBClusterParameterGroup

delete¶

Action to delete an RDS cluster parameter group

example:

policies:
  - name: rds-cluster-param-group-delete
    resource: rds-cluster-param-group
    filters:
      - DBClusterParameterGroupName: cluster_pg_name
    actions:
      - type: delete

properties:
  type:
    enum:
    - delete
required:
- type

Permissions - rds:DeleteDBClusterParameterGroup

modify¶

Action to modify an RDS cluster parameter group

example:

policies:
  - name: rds-cluster-param-group-modify
    resource: rds-cluster-param-group
    filters:
      - DBClusterParameterGroupName: cluster_pg_name
    actions:
      - type: modify
        params:
        - name: lower_case_table_names
          value: "1"
        - name: master_verify_checksum
          value: "1"

properties:
  params:
    items:
      apply-method:
        enum:
        - immediate
        - pending-reboot
        type: string
      name:
        type: string
      required:
      - name
      - value
      type: object
      value:
        type: string
    type: array
  type:
    enum:
    - modify
required:
- params
- type

Permissions - rds:DescribeDBClusterParameters, rds:ModifyDBClusterParameterGroup

rename-tag¶

Rename an existing tag key to a new value.

example:

rename Application, and Bap to App, if a resource has both of the old keys then we’ll use the value specified by Application, which is based on the order of values of old_keys.

policies:
- name: rename-tags-example
  resource: aws.log-group
  filters:
    - or:
      - "tag:Bap": present
      - "tag:Application": present
  actions:
    - type: rename-tag
      old_keys: [Application, Bap]
      new_key: App

properties:
  new_key:
    type: string
  old_key:
    type: string
  old_keys:
    items:
      type: string
    type: array
  type:
    enum:
    - rename-tag
required:
- type

Permissions - tag:TagResources, tag:UntagResources