Policy: AWS > WAF > Web ACL v2 Global > CMDB
Configure whether to record and synchronize details for the AWS WAF web acl v2 global into the CMDB.
The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB. All policies and controls in Guardrails are based around the resource, so usually the CMDB policy is set to "Enforce: Enabled".
If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.
To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".
Resource Types
This policy targets the following resource types:
Controls
Policy Specification
Schema Type | |
|---|---|
Default | |
Valid Values [YAML] |
|
Examples [YAML] |
|
Category
In Your Workspace
Developers
- tmod:@turbot/turbot#/control/categories/cmdb
- tmod:@turbot/aws-waf#/policy/types/webAclV2GlobalCmdb
- turbot graphql policy-type --id "tmod:@turbot/aws-waf#/policy/types/webAclV2GlobalCmdb"
- turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-waf#/policy/types/webAclV2GlobalCmdb"
Get Policy TypeGet Policy Settings
Category URI
Policy Type URI
GraphQL
CLI