Product logo
DocsBlogPricing

Control types for @turbot/aws-glue

AWS > Glue > Crawler > Active

Take an action when an AWS Glue crawler is not active based on the AWS > Glue > Crawler > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Crawler > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/crawlerActive
Parent
Category
Targets

AWS > Glue > Crawler > Approved

Take an action when an AWS Glue crawler is not approved based on AWS > Glue > Crawler > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/crawlerApproved
Parent
Category
Targets

AWS > Glue > Crawler > CMDB

Record and synchronize details for the AWS Glue crawler into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Crawler > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/crawlerCmdb
Parent
Category
Targets

AWS > Glue > Crawler > Discovery

Discover all AWS Glue crawler resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Crawler > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/crawlerDiscovery
Parent
Category
Targets

AWS > Glue > Crawler > Tags

Take an action when an AWS Glue crawler tags is not updated based on the AWS > Glue > Crawler > Tags > * policies.

If the resource is not updated with the tags defined in AWS > Glue > Crawler > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI
tmod:@turbot/aws-glue#/control/types/crawlerTags
Parent
Category
Targets

AWS > Glue > Crawler > Usage

The Usage control determines whether the number of AWS Glue crawler resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > Crawler > Usage policy, and set the limit with the AWS > Glue > Crawler > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/crawlerUsage
Parent
Category
Targets

AWS > Glue > Data Catalog > CMDB

Record and synchronize details for the AWS Glue data catalog into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Data Catalog > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/dataCatalogCmdb
Parent
Category
Targets

AWS > Glue > Data Catalog > Connection Password Encryption

Define the Connection Password Encryption settings required for AWS > Glue > Data Catalog.

Connection Password Encryption refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.

The Connection Password Encryption control compares the encryption settings against the encryption policies for the resource (AWS > Glue > Data Catalog > Connection Password Encryption > *), raises an alarm, and takes the defined enforcement action.

URI
tmod:@turbot/aws-glue#/control/types/dataCatalogConnectionPasswordEncryption
Parent
Category
Targets

AWS > Glue > Data Catalog > Discovery

Discover all AWS Glue data catalog resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI
tmod:@turbot/aws-glue#/control/types/dataCatalogDiscovery
Parent
Category
Targets

AWS > Glue > Data Catalog > Encryption at Rest

Define the Encryption at Rest settings required for AWS > Glue > Data Catalog.

Encryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.

The Encryption at Rest control compares the encryption settings against the encryption policies for the resource (AWS > Glue > Data Catalog > Encryption at Rest > *), raises an alarm, and takes the defined enforcement action.

URI
tmod:@turbot/aws-glue#/control/types/dataCatalogEncryptionAtRest
Parent
Category
Targets

AWS > Glue > Database > Active

Take an action when an AWS Glue database is not active based on the AWS > Glue > Database > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Database > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/databaseActive
Parent
Category
Targets

AWS > Glue > Database > Approved

Take an action when an AWS Glue database is not approved based on AWS > Glue > Database > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/databaseApproved
Parent
Category
Targets

AWS > Glue > Database > CMDB

Record and synchronize details for the AWS Glue database into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Database > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/databaseCmdb
Parent
Category
Targets

AWS > Glue > Database > Discovery

Discover all AWS Glue database resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Database > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/databaseDiscovery
Parent
Category
Targets

AWS > Glue > Database > Usage

The Usage control determines whether the number of AWS Glue database resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > Database > Usage policy, and set the limit with the AWS > Glue > Database > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/databaseUsage
Parent
Category
Targets

AWS > Glue > Development Endpoint [Deprecated] > Active

Take an action when an AWS Glue development endpoint is not active based on the AWS > Glue > Development Endpoint > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Development Endpoint > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/devEndpointActive
Parent
Category
Targets

AWS > Glue > Development Endpoint [Deprecated] > Approved

Take an action when an AWS Glue development endpoint is not approved based on AWS > Glue > Development Endpoint > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/devEndpointApproved
Parent
Category
Targets

AWS > Glue > Development Endpoint [Deprecated] > CMDB

Record and synchronize details for the AWS Glue development endpoint into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Development Endpoint > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

Note: This resource type has been deprecated in v5.8.4 and will be removed in v6.0.0.

URI
tmod:@turbot/aws-glue#/control/types/devEndpointCmdb
Parent
Category
Targets

AWS > Glue > Development Endpoint [Deprecated] > Discovery

Discover all AWS Glue development endpoint resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Development Endpoint > Regions policy, the CMDB control will delete the resource from the CMDB.

Note: This resource type has been deprecated in v5.8.4 and will be removed in v6.0.0.

URI
tmod:@turbot/aws-glue#/control/types/devEndpointDiscovery
Parent
Category
Targets

AWS > Glue > Development Endpoint [Deprecated] > Tags

Take an action when an AWS Glue development endpoint tags is not updated based on the AWS > Glue > Development Endpoint > Tags > * policies.

If the resource is not updated with the tags defined in AWS > Glue > Development Endpoint > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI
tmod:@turbot/aws-glue#/control/types/devEndpointTags
Parent
Category
Targets

AWS > Glue > Development Endpoint [Deprecated] > Usage

The Usage control determines whether the number of AWS Glue development endpoint resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > Development Endpoint > Usage policy, and set the limit with the AWS > Glue > Development Endpoint > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/devEndpointUsage
Parent
Category
Targets

AWS > Glue > Job > Active

Take an action when an AWS Glue job is not active based on the AWS > Glue > Job > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Job > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/jobActive
Parent
Category
Targets

AWS > Glue > Job > Approved

Take an action when an AWS Glue job is not approved based on AWS > Glue > Job > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/jobApproved
Parent
Category
Targets

AWS > Glue > Job > CMDB

Record and synchronize details for the AWS Glue job into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Job > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/jobCmdb
Parent
Category
Targets

AWS > Glue > Job > Discovery

Discover all AWS Glue job resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Job > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/jobDiscovery
Parent
Category
Targets

AWS > Glue > Job > Tags

Take an action when an AWS Glue job tags is not updated based on the AWS > Glue > Job > Tags > * policies.

If the resource is not updated with the tags defined in AWS > Glue > Job > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI
tmod:@turbot/aws-glue#/control/types/jobTags
Parent
Category
Targets

AWS > Glue > Job > Usage

The Usage control determines whether the number of AWS Glue job resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > Job > Usage policy, and set the limit with the AWS > Glue > Job > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/jobUsage
Parent
Category
Targets

AWS > Glue > ML Transform > Active

Take an action when an AWS Glue ml transform is not active based on the AWS > Glue > ML Transform > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > ML Transform > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/mlTransformActive
Parent
Category
Targets

AWS > Glue > ML Transform > Approved

Take an action when an AWS Glue ml transform is not approved based on AWS > Glue > ML Transform > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/mlTransformApproved
Parent
Category
Targets

AWS > Glue > ML Transform > CMDB

Record and synchronize details for the AWS Glue ml transform into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > ML Transform > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/mlTransformCmdb
Parent
Category
Targets

AWS > Glue > ML Transform > Discovery

Discover all AWS Glue ml transform resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > ML Transform > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/mlTransformDiscovery
Parent
Category
Targets

AWS > Glue > ML Transform > Tags

Take an action when an AWS Glue ml transform tags is not updated based on the AWS > Glue > ML Transform > Tags > * policies.

If the resource is not updated with the tags defined in AWS > Glue > ML Transform > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI
tmod:@turbot/aws-glue#/control/types/mlTransformTags
Parent
Category
Targets

AWS > Glue > ML Transform > Usage

The Usage control determines whether the number of AWS Glue ml transform resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > ML Transform > Usage policy, and set the limit with the AWS > Glue > ML Transform > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/mlTransformUsage
Parent
Category
Targets

AWS > Glue > Security Configuration > Active

Take an action when an AWS Glue security configuration is not active based on the AWS > Glue > Security Configuration > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Security Configuration > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/securityConfigurationActive
Parent
Category
Targets

AWS > Glue > Security Configuration > Approved

Take an action when an AWS Glue security configuration is not approved based on AWS > Glue > Security Configuration > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/securityConfigurationApproved
Parent
Category
Targets

AWS > Glue > Security Configuration > CMDB

Record and synchronize details for the AWS Glue security configuration into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Security Configuration > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/securityConfigurationCmdb
Parent
Category
Targets

AWS > Glue > Security Configuration > Discovery

Discover all AWS Glue security configuration resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Security Configuration > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/securityConfigurationDiscovery
Parent
Category
Targets

AWS > Glue > Security Configuration > Usage

The Usage control determines whether the number of AWS Glue security configuration resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the AWS > Glue > Security Configuration > Usage policy, and set the limit with the AWS > Glue > Security Configuration > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/securityConfigurationUsage
Parent
Category
Targets

AWS > Glue > Table > Active

Take an action when an AWS Glue is not active based on the AWS > Glue > > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/tableActive
Parent
Category
Targets

AWS > Glue > Table > Approved

Take an action when an AWS Glue table is not approved based on AWS > Glue > Table > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/tableApproved
Parent
Category
Targets

AWS > Glue > Table > CMDB

Record and synchronize details for the AWS Glue table into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Table > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/tableCmdb
Parent
Category
Targets

AWS > Glue > Table > Discovery

Discover all AWS Glue table resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Table > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/tableDiscovery
Parent
Category
Targets

AWS > Glue > Table > Usage

The Usage control determines whether the number of AWS Glue table resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > Table > Usage policy, and set the limit with the AWS > Glue > Table > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/tableUsage
Parent
Category
Targets

AWS > Glue > Trigger > Active

Take an action when an AWS Glue trigger is not active based on the AWS > Glue > Trigger > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Trigger > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/triggerActive
Parent
Category
Targets

AWS > Glue > Trigger > Approved

Take an action when an AWS Glue trigger is not approved based on AWS > Glue > Trigger > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/triggerApproved
Parent
Category
Targets

AWS > Glue > Trigger > CMDB

Record and synchronize details for the AWS Glue trigger into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Trigger > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/triggerCmdb
Parent
Category
Targets

AWS > Glue > Trigger > Discovery

Discover all AWS Glue trigger resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Trigger > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/triggerDiscovery
Parent
Category
Targets

AWS > Glue > Trigger > Tags

Take an action when an AWS Glue trigger tags is not updated based on the AWS > Glue > Trigger > Tags > * policies.

If the resource is not updated with the tags defined in AWS > Glue > Trigger > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI
tmod:@turbot/aws-glue#/control/types/triggerTags
Parent
Category
Targets

AWS > Glue > Workflow > Active

Take an action when an AWS Glue workflow is not active based on the AWS > Glue > Workflow > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has the ability to delete / cleanup the resource. When running an automated compliance environment, it's common to end up with a wide range of alarms that are difficult and time consuming to clear. The Active control brings automated, well-defined control to this process.

The Active control checks the status of all defined Active policies for the resource (AWS > Glue > Workflow > Active > *), raises an alarm, and takes the defined enforcement action. Each Active sub-policy can calculate a status of active, inactive or skipped. Generally, if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved for any reason it will be considered Unapproved.

See Active for more information.

URI
tmod:@turbot/aws-glue#/control/types/workflowActive
Parent
Category
Targets

AWS > Glue > Workflow > Approved

Take an action when an AWS Glue workflow is not approved based on AWS > Glue > Workflow > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI
tmod:@turbot/aws-glue#/control/types/workflowApproved
Parent
Category
Targets

AWS > Glue > Workflow > CMDB

Record and synchronize details for the AWS Glue workflow into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Turbot CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > Glue > Workflow > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI
tmod:@turbot/aws-glue#/control/types/workflowCmdb
Parent
Category
Targets

AWS > Glue > Workflow > Discovery

Discover all AWS Glue workflow resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > Glue > Workflow > Regions policy, the CMDB control will delete the resource from the CMDB.

URI
tmod:@turbot/aws-glue#/control/types/workflowDiscovery
Parent
Category
Targets

AWS > Glue > Workflow > Tags

Take an action when an AWS Glue workflow tags is not updated based on the AWS > Glue > Workflow > Tags > * policies.

If the resource is not updated with the tags defined in AWS > Glue > Workflow > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI
tmod:@turbot/aws-glue#/control/types/workflowTags
Parent
Category
Targets

AWS > Glue > Workflow > Usage

The Usage control determines whether the number of AWS Glue workflow resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > Glue > Workflow > Usage policy, and set the limit with the AWS > Glue > Workflow > Usage > Limit policy.

URI
tmod:@turbot/aws-glue#/control/types/workflowUsage
Parent
Category
Targets