Policy Packs

guardrails-samples

Ensure that sensitive data within snapshots is accessible only to authorized accounts, reducing the risk of unauthorized access and data breaches.

Enforce AWS RDS DB Cluster Manual Snapshots Are Shared With Approved Accounts

main

aws_rds_db_cluster_snapshot_manual_approved

Determine the action to take when an AWS RDS db cluster snapshot [manual] is not approved based on `AWS &gt; RDS &gt; DB Cluster Snapshot [Manual] &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

dbClusterSnapshotManualApproved

AWS > RDS > DB Cluster Snapshot [Manual] > Approved

aws_rds_db_cluster_snapshot_manual_approved_custom

Determine whether the AWS RDS db cluster snapshot [manual] is allowed to exist.&#92;nThis policy will be evaluated by the Approved control. If an AWS RDS db cluster snapshot [manual] is not approved, it will be subject to the action specified in the `AWS &gt; RDS &gt; DB Cluster Snapshot [Manual] &gt; Approved` policy.&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.&#92;n

Developers