Policy Packs

guardrails-samples

Mitigate the risk of unauthorized access, potential data breaches, and ensures compliance with security best practices and regulatory requirements.

Enforce AWS DMS Replication Instances Are Not Publicly Accessible

main

aws_dms_replication_instance_approved

Determine the action to take when an AWS DMS replication instance is not approved based on `AWS &gt; DMS &gt; Replication Instance &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

replicationInstanceApproved

AWS > DMS > Replication Instance > Approved

aws_dms_replication_instance_approved_custom

Determine whether the AWS DMS replication instance is allowed to exist.&#92;nThis policy will be evaluated by the Approved control. If an AWS DMS replication instance is not approved, it will be subject to the action specified in the `AWS &gt; DMS &gt; Replication Instance &gt; Approved` policy.&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.&#92;n

replicationInstanceApprovedCustom

AWS > DMS > Replication Instance > Approved > Custom

turbot_policy_setting.aws_dms_replication_instance_approved

turbot_policy_setting.aws_dms_replication_instance_approved_custom

Policy	Setting	Note
AWS > DMS > Replication Instance > Approved	Check: Approved
AWS > DMS > Replication Instance > Approved > Custom	Calculated

Policy Settings