Mods
AWS

Policy: AWS > EC2 > Snapshot > CMDB

Configure whether to record and synchronize details for the AWS EC2 snapshot into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB. All policies and controls in Guardrails are based around the resource, so usually the CMDB policy is set to "Enforce: Enabled".

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > EC2 > Snapshot > Regions policy, the CMDB control will delete the resource from the CMDB.

(Note: Setting CMDB to "Skip" will also pause these changes.)

Resource Types

This policy targets the following resource types:

Controls

Policy Specification

Schema Type
string
Default
Enforce: Enabled
Valid Values [YAML]
  • Skip
    
  • Enforce: Enabled
    
  • Enforce: Disabled
    
  • Enforce: Enabled for Snapshots not created with AWS Backup
    
Examples [YAML]
  • Skip
    

Category

In Your Workspace

Developers