Policy Packs

guardrails-samples

By Ensuring that only approved volume types are used, organizations can maintain consistent performance standards, manage expenses effectively, and mitigate risks associated with unauthorized or inappropriate storage configurations.

Enforce AWS EBS Volumes Use Specific Volume Types

main

aws_ec2_volume_approved

Determine the action to take when an AWS EC2 volume is not approved based on `AWS &gt; EC2 &gt; Volume &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

volumeApproved

AWS > EC2 > Volume > Approved

aws_ec2_volume_approved_volume_types

A list of volume types that the AWS EC2 volume is approved to use.&#92;n&#92;nThe expected format is an array of volume types. You may use the `*` and `?` wildcard characters (and [more](https://github.com/micromatch/micromatch#matching-features)).&#92;n&#92;nThis policy will be evaluated by the Approved control. If an AWS EC2 volume is not matched by the approved list, it will be subject to the action specified in the `AWS &gt; EC2 &gt; Volume &gt; Approved` policy.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note:** It is recommended to include volume types in this policy in the `AWS &gt; EC2 &gt; Permissions &gt; Lockdown &gt; Volume Types` policy as well, to ensure that the lockdown policy will not restrict these approved volume types.&#92;n

volumeApprovedVolumeTypes

AWS > EC2 > Volume > Approved > Volume Types

turbot_policy_setting.aws_ec2_volume_approved

turbot_policy_setting.aws_ec2_volume_approved_volume_types

Policy	Setting	Note
AWS > EC2 > Volume > Approved	Check: Approved
AWS > EC2 > Volume > Approved > Volume Types	- "gp2" - "io1" - "sc1" - "st1" - "standard"

Policy Settings