Policy: AWS > MSK > Cluster > Approved > Instance Types

A list of instance types that the AWS MSK cluster is approved to use.

The expected format is an array of instance types. You may use the * and ? wildcard characters (and more).

This policy will be evaluated by the Approved control. If an AWS MSK cluster is not matched by the approved list, it will be subject to the action specified in the AWS > MSK > Cluster > Approved policy.

See Approved for more information.

Note: It is recommended to include instance types in this policy in the AWS > MSK > Permissions > Lockdown > Instance Types policy as well, to ensure that the lockdown policy will not restrict these approved instance types.

Resource Types

This policy targets the following resource types:

AWS > MSK > Cluster

Primary Policy

This policy is used with the following primary policy:

AWS > MSK > Cluster > Approved

Controls

AWS > MSK > Cluster > Approved

Policy Specification

Schema Type	`array`
Default	`- '*'`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceApproved

Policy Type URI

tmod:@turbot/aws-msk#/policy/types/clusterApprovedInstanceTypes

GraphQL

query policyType(id: "tmod:@turbot/aws-msk#/policy/types/clusterApprovedInstanceTypes") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-msk#/policy/types/clusterApprovedInstanceTypes'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-msk#/policy/types/clusterApprovedInstanceTypes'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-msk#/policy/types/clusterApprovedInstanceTypes"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-msk#/policy/types/clusterApprovedInstanceTypes"