Policy: AWS > EC2 > Key Pair > Approved > Custom

Determine whether the AWS EC2 key pair is allowed to exist. This policy will be evaluated by the Approved control. If an AWS EC2 key pair is not approved, it will be subject to the action specified in the AWS > EC2 > Key Pair > Approved policy. See Approved for more information.

Note: The policy value must be a string with a value of Approved, Not approved or Skip, or in the form of YAML objects. The object(s) must contain the key result with its value as Approved or Not approved. A custom title and message can also be added using the keys title and message respectively.

Targets

This policy targets the following resource types:

AWS > EC2 > Key Pair

Primary Policy

This policy is used with the following primary policy:

AWS > EC2 > Key Pair > Approved

Controls

Setting this policy configures this control:

AWS > EC2 > Key Pair > Approved

Policy Specification

Default	`Skip`
Examples [YAML]	`Approved` `Not approved` `Skip` `result: Approved` `title: string result: Not approved` `title: string result: Approved message: string` `- title: string result: Approved message: string - title: string result: Not approved message: string`

Default

Skip

Examples [YAML]

Approved

Not approved

Skip

result: Approved

title: string
result: Not approved

title: string
result: Approved
message: string

- title: string
  result: Approved
  message: string
- title: string
  result: Not approved
  message: string

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceApproved

Policy Type URI

tmod:@turbot/aws-ec2#/policy/types/keyPairApprovedCustom

GraphQL

query policyType(id: "tmod:@turbot/aws-ec2#/policy/types/keyPairApprovedCustom") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-ec2#/policy/types/keyPairApprovedCustom'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-ec2#/policy/types/keyPairApprovedCustom'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-ec2#/policy/types/keyPairApprovedCustom"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-ec2#/policy/types/keyPairApprovedCustom"