Resource Type: Turbot

Controls

The primary controls for Turbot are:

• Account Muting > Sync
• Active Grant Expiration
• Benchmark Installed
• Cache
• Control Prevention
• Discovery Level
• Grant Expiration
• Materialize
• Notifications
• Policy Setting Expiration
• Smart Process Retention
• Smart Retention
• Statistics
• Type Installed
• Webhook Secret Rotation
• Workspace

It is also targeted by these controls:

• Turbot > Mod > Event Monitor
• Turbot > Mod > Process Monitor
• Turbot > Mod > Runnable Monitor
• Turbot > SIEM > Denial Events Rollup

Quick Actions

• Rotate Github Secret
• Denial Event Notification
• Rotate osquery Secret
• Rotate Webhook Secret

Category

• Turbot

In Your Workspace

• Controls by Resource Type report
• Policy Settings by Resource Type report
• Resources by Resource Type report

Developers

Resource Type URI

tmod:@turbot/turbot#/resource/types/turbot

Category URI

tmod:@turbot/turbot#/resource/categories/turbot

GraphQL

query resource(id: "tmod:@turbot/turbot#/resource/types/turbot") { … }

query resourceActivities(filter: "resourceId:'tmod:@turbot/turbot#/resource/types/turbot'") { … }

mutation createResource(input: { … })

mutation updateResource(input: { … })

CLI

Get Resource

turbot graphql resource --id "tmod:@turbot/turbot#/resource/types/turbot"

Steampipe Query

Get Resource

select * from guardrails_resource where resource_type_uri = 'tmod:@turbot/turbot#/resource/types/turbot';

Get Policy Settings (By Resource ID)

select * from guardrails_policy_setting where filter = 'resourceTypeId:"tmod:@turbot/turbot#/resource/types/turbot"';

Get Resource Notification

select * from guardrails_notification where resource_type_uri = 'tmod:@turbot/turbot#/resource/types/turbot' and notification_type in ('resource_updated', 'resource_created');