Policy Packs

guardrails-samples

This measure minimizes the attack surface by eliminating potential entry points for unauthorized access and reducing the risk of data breaches, thereby ensuring compliance with security best practices.

Enforce AWS VPC Elastic IPs Are Deleted

main

vpc_elastic_ip_approved

Determine the action to take when an AWS VPC elastic ip is not approved based on `AWS &gt; VPC &gt; Elastic IP &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

elasticIpApproved

AWS > VPC > Elastic IP > Approved

vpc_elastic_ip_approved_usage

Determine whether the AWS VPC elastic ip is allowed to exist.&#92;n&#92;nThis policy will be evaluated by the Approved control. If an AWS VPC elastic ip is not approved, it will be subject to the action specified in the `AWS &gt; VPC &gt; Elastic IP &gt; Approved` policy.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

elasticIpApprovedUsage

AWS > VPC > Elastic IP > Approved > Usage

turbot_policy_setting.vpc_elastic_ip_approved

turbot_policy_setting.vpc_elastic_ip_approved_usage

Policy	Setting	Note
AWS > VPC > Elastic IP > Approved	Check: Approved
AWS > VPC > Elastic IP > Approved > Usage	Not approved

Policy Settings