Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
AWS
Loading controls...

Control: AWS > VPC > Internet Gateway > Active

Take an action when an AWS VPC internet gateway is not active based on the AWS > VPC > Internet Gateway > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > VPC > Internet Gateway > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

Resource Types

This control targets the following resource types:

  • AWS > VPC > Internet Gateway

Policies

The following policies can be used to configure this control:

  • AWS > VPC > Internet Gateway > Active

This control type relies on these other policies when running actions:

  • AWS > VPC > Internet Gateway > Active > Age
  • AWS > VPC > Internet Gateway > Active > Last Modified
  • AWS > VPC > Internet Gateway > Active > Attached

Quick Actions

  • Skip alarm for Active control
  • Skip alarm for Active control [90 days]

Permissions

Cloud permissions used by this control and its actions:

  • ec2:DeleteInternetGateway
  • ec2:DetachInternetGateway

Category

  • Resource > Active

In Your Workspace

  • Controls by Resource report
  • Controls by Control Type report

Developers

    Control Type URI
    • tmod:@turbot/aws-vpc-internet#/control/types/internetGatewayActive
  • Category URI
    • tmod:@turbot/turbot#/control/categories/resourceActive
  • GraphQL
    • query controlType(id: "tmod:@turbot/aws-vpc-internet#/control/types/internetGatewayActive") { … }
    • query controls(filter: "controlTypeId:'tmod:@turbot/aws-vpc-internet#/control/types/internetGatewayActive'") { … }
  • CLI
    • Get Controls
    • turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-vpc-internet#/control/types/internetGatewayActive"
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
180
Mods
497
Resource Types
8,691
Policies
3,362
Controls
1,833
Quick Actions
540
IAM