Control: AWS > EKS > Node Group > Allowed > Instance Type
Take an action when an AWS EKS node group uses an instance type that is not allowed.
The Allowed > Instance Type control checks if the node group uses an allowed instance type based on the Allowed > Instance Type > * policies. If the node group uses an instance type that is not in the allowed list, this control raises an alarm and takes the defined enforcement action.
For any enforcement actions that specify if new, e.g., Enforce: Delete if instance type not allowed and resource is new, this control will only take the enforcement actions for resources created within the last 60 minutes.
Resource Types
This control targets the following resource types:
Policies
The following policies can be used to configure this control:
This control type relies on these other policies when running actions:
Permissions
Cloud permissions used by this control and its actions:
eks:DeleteNodegroup
Category
In Your Workspace
Developers
- tmod:@turbot/aws-eks#/control/types/nodeGroupAllowedInstanceType
- tmod:@turbot/turbot#/control/categories/resourceAllowed
- turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-eks#/control/types/nodeGroupAllowedInstanceType"
Get Controls