Policy Packs

guardrails-samples

Enforcing the use of Creator and Creation Time tags provides critical metadata that helps in identifying the origin and creation time of S3 buckets.

Enforce Creator and Creation Time Tags for AWS S3 Buckets

main

aws_s3_bucket_tags

Determine the action to take when an AWS S3 bucket tags are not updated based on the `AWS &gt; S3 &gt; Bucket &gt; Tags &gt; *` policies.&#92;n&#92;nThe control ensure AWS S3 bucket tags include tags defined in `AWS &gt; S3 &gt; Bucket &gt; Tags &gt; Template`.&#92;n&#92;nTags not defined in Bucket Tags Template will not be modified or deleted. Setting a tag value to `undefined` will result in the tag being deleted.&#92;n&#92;nSee [Tags](https://turbot.com/guardrails/docs/concepts/guardrails/tagging) for more information.&#92;n

bucketTags

AWS > S3 > Bucket > Tags

aws_s3_bucket_tags_template

The template is used to generate the keys and values for AWS S3 bucket.&#92;n&#92;nTags not defined in Bucket Tags Template will not be modified or deleted. Setting a tag value to `undefined` will result in the tag being deleted.&#92;n&#92;nSee [Tags](https://turbot.com/guardrails/docs/concepts/guardrails/tagging) for more information.&#92;n

bucketTagsTemplate

AWS > S3 > Bucket > Tags > Template

turbot_policy_setting.aws_s3_bucket_tags

turbot_policy_setting.aws_s3_bucket_tags_template

Policy	Setting	Note
AWS > S3 > Bucket > Tags	Check: Tags are correct
AWS > S3 > Bucket > Tags > Template	Calculated

Policy Settings