Policy: AWS > EC2 > Snapshot > CMDB > Excluded Services

A list of AWS services whose snapshots should be excluded from the Guardrails CMDB.

When a service is selected, the Snapshot > Discovery control stops recording snapshots created by that service, and the Snapshot > CMDB control removes any such snapshots already tracked in the CMDB. All other snapshots - including user-created, third-party, and non-excluded service snapshots - continue to be tracked.

Excluded snapshots are identified by the service-managed tag that each service applies to every snapshot it creates: - AWS Backup - aws:backup:source-resource - AWS Elastic Disaster Recovery - AWSElasticDisasterRecoveryManaged - AWS Application Migration Service - AWSApplicationMigrationServiceManaged

This policy only applies when AWS > EC2 > Snapshot > CMDB is in an enabled state. It composes with the legacy Enforce: Enabled for Snapshots not created with AWS Backup CMDB option (the effective exclusion set is the union of both).