Control: AWS > VPC > Security Group > CMDB

Record and synchronize details for the AWS VPC security group into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > VPC > Security Group > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

Resource Types

This control targets the following resource types:

AWS > VPC > Security Group

Policies

The following policies can be used to configure this control:

AWS > VPC > Security Group > CMDB

This control type relies on these other policies when running actions:

AWS > VPC > Security Group > Regions

Permissions

Cloud permissions used by this control and its actions:

ec2:DescribeSecurityGroups

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-vpc-security#/control/types/securityGroupCmdb

Category URI

tmod:@turbot/turbot#/control/categories/cmdb

GraphQL

query controlType(id: "tmod:@turbot/aws-vpc-security#/control/types/securityGroupCmdb") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-vpc-security#/control/types/securityGroupCmdb'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-vpc-security#/control/types/securityGroupCmdb"