Policy Packs

guardrails-samples

Ensure that service roles are properly configured and used, allowing AWS services to interact with your resources securely, minimizing the risk of unauthorized actions.

Enable AWS IAM Service Roles

main

aws_turbot_service_role_default_ec2_instance

Configure the standard Guardrails Service Role for use with AWS EC2 instances.&#92;n

serviceRolesDefaultEc2Instance

AWS > Turbot > Service Roles > Default EC2 Instance

aws_turbot_service_role_event_handlers_global

Configure the standard Guardrails Service Role for the `AWS &gt; Turbot &gt; Event Handlers [Global]` stack.&#92;n

serviceRolesEventHandlersGlobal

AWS > Turbot > Service Roles > Event Handlers [Global]

aws_turbot_service_role_flow_logging

Configure the standard Guardrails Service Role for the AWS VPC Flow Logging service.&#92;n

serviceRolesFlowLogging

AWS > Turbot > Service Roles > Flow Logging

aws_turbot_service_role_ssm_notifications

Configure the standard Guardrails Service Role for the AWS SSM Notifications.&#92;n

serviceRolesSsmNotifications

AWS > Turbot > Service Roles > SSM Notifications

aws_turbot_service_roles

Configure standard Guardrails Service Roles for services such as AWS, VPC&#92;nFlow logs, etc..&#92;n

serviceRoles

AWS > Turbot > Service Roles

aws_turbot_service_roles_configuration_recording

Configure the standard Guardrails Service Role for the AWS Config service.&#92;n

serviceRolesConfigurationRecording

AWS > Turbot > Service Roles > Configuration Recording

turbot_policy_setting.aws_turbot_service_roles

turbot_policy_setting.aws_turbot_service_roles_configuration_recording

turbot_policy_setting.aws_turbot_service_role_default_ec2_instance

turbot_policy_setting.aws_turbot_service_role_event_handlers_global

turbot_policy_setting.aws_turbot_service_role_flow_logging

turbot_policy_setting.aws_turbot_service_role_ssm_notifications

Policy	Setting	Note
AWS > Turbot > Service Roles	Check: Configured
AWS > Turbot > Service Roles > Configuration Recording	Enabled
AWS > Turbot > Service Roles > Default EC2 Instance	Enabled
AWS > Turbot > Service Roles > Event Handlers [Global]	Enabled
AWS > Turbot > Service Roles > Flow Logging	Enabled
AWS > Turbot > Service Roles > SSM Notifications	Enabled

Policy Settings