Policy: AWS > CloudWatch > Stack > Secret Variables

Terraform secret variables in Terraform HCL that will be used as inputs to the stack as a .tfvars file.

A Guardrails Stack is a set of resources configured by Guardrails, as specified via Terraform source. Stacks are responsible for the creation and deletion of multiple resources. Once created, stack resources are responsible for configuring themselves from the stack source via their Configured control.

Resource Types

This policy targets the following resource types:

AWS > Region

Primary Policy

This policy is used with the following primary policy:

AWS > CloudWatch > Stack

Controls

AWS > CloudWatch > Stack

Policy Specification

Schema Type	`string`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/configured

Policy Type URI

tmod:@turbot/aws-cloudwatch#/policy/types/cloudWatchStackSecretVariables

GraphQL

query policyType(id: "tmod:@turbot/aws-cloudwatch#/policy/types/cloudWatchStackSecretVariables") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-cloudwatch#/policy/types/cloudWatchStackSecretVariables'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-cloudwatch#/policy/types/cloudWatchStackSecretVariables'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-cloudwatch#/policy/types/cloudWatchStackSecretVariables"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-cloudwatch#/policy/types/cloudWatchStackSecretVariables"