Policy: AWS > Account > Permissions > Lockdown > Budget > Restricted APIs

A yaml object that contains a list of APIs that should be restricted when the budget reaches a specific state.

For example, to restrict users from running and starting new ec2 instances, starting RDS databases, or creating Redshift clusters when the budget state is Critical or higher, enter:

Critical: - ec2:RunInstance - ec2:StartInstance - rds:StartDB* - redshift:createcluster

Resource Types

This policy targets the following resource types:

AWS > Account

Primary Policy

This policy is used with the following primary policy:

AWS > Account > Permissions > Lockdown > Budget

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/iamPermissions

Policy Type URI

tmod:@turbot/aws-iam#/policy/types/accountPermissionsLockdownBudgetRestrictedApis

GraphQL

query policyType(id: "tmod:@turbot/aws-iam#/policy/types/accountPermissionsLockdownBudgetRestrictedApis") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/accountPermissionsLockdownBudgetRestrictedApis'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/accountPermissionsLockdownBudgetRestrictedApis'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-iam#/policy/types/accountPermissionsLockdownBudgetRestrictedApis"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-iam#/policy/types/accountPermissionsLockdownBudgetRestrictedApis"