aws.workspaces-web

Filters

browser-policy

event

finding

list-item

ops-item

reduce

subnet

user-access-logging

user-settings

value

browser-policy

Applies value type filter on the browser policy of a workspaces secured browser. :example:

policies:
  - name: browser-policy-match
    resource: workspaces-web
    filters:
      - type: browser-policy
        key: chromePolicies.AllowDeletingBrowserHistory.value
        op: eq
        value: false

Permissions - workspaces-web:GetBrowserSettings

user-access-logging

Filters workspaces secured browsers based on their user access logging settings. :example:

policies:
  - name: user-access-logging-match
    resource: workspaces-web
    filters:
      - type: user-access-logging
        key: kinesisStreamArn
        value: present

Permissions - workspaces-web:GetUserAccessLoggingSettings

user-settings

Filters workspaces secured browsers based on their user settings. :example:

policies:
  - name: user-settings-match
    resource: workspaces-web
    filters:
      - type: user-settings
        key: copyAllowed
        value: Disabled

Permissions - workspaces-web:GetUserSettings

Actions

auto-tag-user

copy-related-tag

delete

invoke-lambda

invoke-sfn

notify

post-finding

post-item

put-metric

remove-tag

tag

webhook

delete

Delete a WorkSpaces Web portal

example:

policies:
  - name: delete-workspaces-web
    resource: workspaces-web
    actions:
      - type: delete

Permissions - workspaces-web:DeletePortal, workspaces-web:DisassociateNetworkSettings, workspaces-web:DisassociateBrowserSettings, workspaces-web:DisassociateUserSettings