Policy Packs

guardrails-samples

Ensure optimize resource utilization, manage expenses, and maintain consistent security and operational standards across the cloud environment.

Enforce AWS EC2 Instances Use Approved Instance Types

main

aws_ec2_instance_approved

Determine the action to take when an AWS EC2 instance is not approved based on `AWS &gt; EC2 &gt; Instance &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

instanceApproved

AWS > EC2 > Instance > Approved

aws_ec2_instance_approved_volume_types

A list of instance types that the AWS EC2 instance is approved to use.&#92;n&#92;nThe expected format is an array of instance types. You may use the `*` and `?` wildcard characters (and [more](https://github.com/micromatch/micromatch#matching-features)).&#92;n&#92;nThis policy will be evaluated by the Approved control. If an AWS EC2 instance is not matched by the approved list, it will be subject to the action specified in the `AWS &gt; EC2 &gt; Instance &gt; Approved` policy.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note:** It is recommended to include instance types in this policy in the `AWS &gt; EC2 &gt; Permissions &gt; Lockdown &gt; Instance Types` policy as well, to ensure that the lockdown policy will not restrict these approved instance types.&#92;n

Developers