Policy: AWS > Security Hub > Tags Template [Default]

A template used to generate the keys and values for AWS Security Hub resources.

By default, all Security Hub resource Tags > Template policies will use this value.

Resource Types

This policy targets the following resource types:

AWS > Account

Policy Specification

Default template	`{%- if $.defaultTags.value \| length == 0 %} [] {%- elif $.defaultTags.value != undefined %}{{ $.defaultTags.value \| dump \| safe }}{%- else %}{% for item in $.defaultTags.value %}- {{ item }}{% endfor %}{% endif %}`
Default template input	`\| { defaultTags: policyValue(uri:"tmod:@turbot/aws#/policy/types/defaultTagsTemplate") { value } }`
Examples [YAML]	`foo: bar environment: prod` `- foo123: bar - environment: dev` `- cost-center: zz123 - delete-me: undefined`

Default template

{%- if $.defaultTags.value | length == 0 %} [] {%- elif $.defaultTags.value != undefined %}{{ $.defaultTags.value | dump | safe }}{%- else %}{% for item in $.defaultTags.value %}- {{ item }}{% endfor %}{% endif %}

Default template input

|
  {
    defaultTags: policyValue(uri:"tmod:@turbot/aws#/policy/types/defaultTagsTemplate") {
      value
    }
  }

Examples [YAML]

foo: bar
environment: prod

- foo123: bar
- environment: dev

- cost-center: zz123
- delete-me: undefined

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceTags

Policy Type URI

tmod:@turbot/aws-securityhub#/policy/types/securityHubTagsTemplate

GraphQL

query policyType(id: "tmod:@turbot/aws-securityhub#/policy/types/securityHubTagsTemplate") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-securityhub#/policy/types/securityHubTagsTemplate'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-securityhub#/policy/types/securityHubTagsTemplate'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-securityhub#/policy/types/securityHubTagsTemplate"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-securityhub#/policy/types/securityHubTagsTemplate"