aws.workspaces-directory

Filters

• client-properties

• connection-aliases

• directory

• event

• finding

• list-item

• marked-for-op

• ops-item

• reduce

• security-group

• subnet

• tag-count

• value

Actions

• auto-tag-user

• copy-related-tag

• deregister

• invoke-lambda

• invoke-sfn

• mark-for-op

• modify-client-properties

• notify

• post-finding

• post-item

• put-metric

• remove-tag

• rename-tag

• tag

• webhook

deregister

Deregisters a workspace

example:

policies:
  - name: deregister-workspace
    resource: aws.workspaces-directory
    filters:
      - "tag:Deregister": present
    actions:
      - deregister

properties:
  type:
    enum:
    - deregister
required:
- type

Permissions - workspaces:DeregisterWorkspaceDirectory

modify-client-properties

Action to enable/disable credential caching for Workspaces client.

example:

policies:
  - name: workspace-directories-credentials-cache
    resource: aws.workspaces-directory
    filters:
      - type: client-properties
        key: ReconnectEnabled
        value: ENABLED
    actions:
      - type: modify-client-properties
        attributes:
          ClientProperties:
            ReconnectEnabled: DISABLED

properties:
  attributes:
    additionalProperties: false
    properties:
      ClientProperties:
        additionalProperties: false
        properties:
          ReconnectEnabled:
            enum:
            - DISABLED
            - ENABLED
        required:
        - ReconnectEnabled
        type: object
    type: object
  type:
    enum:
    - modify-client-properties
required:
- attributes
- type

Permissions - workspaces:ModifyClientProperties

rename-tag

Rename an existing tag key to a new value.

example:

rename Application, and Bap to App, if a resource has both of the old keys then we’ll use the value specified by Application, which is based on the order of values of old_keys.

policies:
- name: rename-tags-example
  resource: aws.log-group
  filters:
    - or:
      - "tag:Bap": present
      - "tag:Application": present
  actions:
    - type: rename-tag
      old_keys: [Application, Bap]
      new_key: App

properties:
  new_key:
    type: string
  old_key:
    type: string
  old_keys:
    items:
      type: string
    type: array
  type:
    enum:
    - rename-tag
required:
- type

Permissions - tag:TagResources, tag:UntagResources