Control: AWS > Organizations > Declarative Policy EC2 > Discovery

Discover all AWS Organizations Declarative Policy EC2 resources and add them to the CMDB. The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control. This control will automatically re-run every 24 hours because AWS does not currently support all real-time events for this resource type.

Resource Types

This control targets the following resource types:

AWS > Organization

Policies

The following policies can be used to configure this control:

AWS > Organizations > Declarative Policy EC2 > CMDB

This control type relies on these other policies when running actions:

AWS > Account > Partition

Permissions

Cloud permissions used by this control and its actions:

organizations:ListPolicies

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws#/control/types/declarativePolicyEc2Discovery

Category URI

tmod:@turbot/turbot#/control/categories/cmdbDiscovery

GraphQL

query controlType(id: "tmod:@turbot/aws#/control/types/declarativePolicyEc2Discovery") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws#/control/types/declarativePolicyEc2Discovery'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws#/control/types/declarativePolicyEc2Discovery"