Control types for @turbot/aws-waf

Category

Targets

AWS > WAF > IP Set > Approved

Take an action when an AWS WAF ip set is not approved based on AWS > WAF > IP Set > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetApproved

Parent

Category

Targets

AWS > WAF > IP Set > CMDB

Record and synchronize details for the AWS WAF ip set into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/ipSetCmdb

Parent

Category

Targets

AWS > WAF > IP Set > Discovery

Discover all AWS WAF ip set resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/ipSetDiscovery

Parent

Category

Targets

AWS > WAF > IP Set > Usage

The Usage control determines whether the number of AWS WAF ip set resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > IP Set > Usage policy, and set the limit with the AWS > WAF > IP Set > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/ipSetUsage

Parent

Category

Targets

AWS > WAF > IP Set v2 Global > Active

Take an action when an AWS WAF ip set v2 global is not active based on the
AWS > WAF > IP Set v2 Global > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > IP Set v2 Global > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2GlobalActive

Parent

Category

Targets

AWS > WAF > IP Set v2 Global > Approved

Take an action when an AWS WAF ip set v2 global is not approved based on AWS > WAF > IP Set v2 Global > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2GlobalApproved

Parent

Category

Targets

AWS > WAF > IP Set v2 Global > CMDB

Record and synchronize details for the AWS WAF ip set v2 global into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2GlobalCmdb

Parent

Category

Targets

AWS > WAF > IP Set v2 Global > Discovery

Discover all AWS WAF ip set v2 global resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2GlobalDiscovery

Parent

Category

Targets

AWS > WAF > IP Set v2 Global > Tags

Take an action when an AWS WAF ip set v2 global tags is not updated based on the AWS > WAF > IP Set v2 Global > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > IP Set v2 Global > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2GlobalTags

Parent

Category

Targets

AWS > WAF > IP Set v2 Global > Usage

The Usage control determines whether the number of AWS WAF ip set v2 global resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > IP Set v2 Global > Usage policy, and set the limit with the AWS > WAF > IP Set v2 Global > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2GlobalUsage

Parent

Category

Targets

AWS > WAF > IP Set v2 Regional > Active

Take an action when an AWS WAF ip set v2 regional is not active based on the
AWS > WAF > IP Set v2 Regional > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > IP Set v2 Regional > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2RegionalActive

Parent

Category

Targets

AWS > WAF > IP Set v2 Regional > Approved

Take an action when an AWS WAF ip set v2 regional is not approved based on AWS > WAF > IP Set v2 Regional > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2RegionalApproved

Parent

Category

Targets

AWS > WAF > IP Set v2 Regional > CMDB

Record and synchronize details for the AWS WAF ip set v2 regional into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > WAF > IP Set v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2RegionalCmdb

Parent

Category

Targets

AWS > WAF > IP Set v2 Regional > Discovery

Discover all AWS WAF ip set v2 regional resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > WAF > IP Set v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2RegionalDiscovery

Parent

Category

Targets

AWS > WAF > IP Set v2 Regional > Tags

Take an action when an AWS WAF ip set v2 regional tags is not updated based on the AWS > WAF > IP Set v2 Regional > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > IP Set v2 Regional > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2RegionalTags

Parent

Category

Targets

AWS > WAF > IP Set v2 Regional > Usage

The Usage control determines whether the number of AWS WAF ip set v2 regional resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the AWS > WAF > IP Set v2 Regional > Usage policy, and set the limit with the AWS > WAF > IP Set v2 Regional > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/ipSetV2RegionalUsage

Parent

Category

Targets

AWS > WAF > Rate Based Rule > Active

Take an action when an AWS WAF rate based rule is not active based on the
AWS > WAF > Rate Based Rule > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Rate Based Rule > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/rateBasedRuleActive

Parent

Category

Targets

AWS > WAF > Rate Based Rule > Approved

Take an action when an AWS WAF rate based rule is not approved based on AWS > WAF > Rate Based Rule > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/rateBasedRuleApproved

Parent

Category

Targets

AWS > WAF > Rate Based Rule > CMDB

Record and synchronize details for the AWS WAF rate based rule into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/rateBasedRuleCmdb

Parent

Category

Targets

AWS > WAF > Rate Based Rule > Configured

Maintain AWS > WAF > Rate Based Rule configuration.

Note: If the resource is managed by another stack, then the Skip/Check/Enforce values here are ignored
and inherit from the stack that owns it.

URI

tmod:@turbot/aws-waf#/control/types/rateBasedRuleConfigured

Parent

Category

Resource > Configured

Targets

AWS > WAF > Rate Based Rule > Discovery

Discover all AWS WAF rate based rule resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/rateBasedRuleDiscovery

Parent

Category

Targets

AWS > WAF > Rate Based Rule > Usage

The Usage control determines whether the number of AWS WAF rate based rule resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Rate Based Rule > Usage policy, and set the limit with the AWS > WAF > Rate Based Rule > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/rateBasedRuleUsage

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Global > Active

Take an action when an AWS WAF regex pattern set v2 global is not active based on the
AWS > WAF > Regex Pattern Set v2 Global > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Regex Pattern Set v2 Global > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2GlobalActive

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Global > Approved

Take an action when an AWS WAF regex pattern set v2 global is not approved based on AWS > WAF > Regex Pattern Set v2 Global > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2GlobalApproved

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Global > CMDB

Record and synchronize details for the AWS WAF regex pattern set v2 global into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2GlobalCmdb

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Global > Discovery

Discover all AWS WAF regex pattern set v2 global resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2GlobalDiscovery

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Global > Tags

Take an action when an AWS WAF regex pattern set v2 global tags is not updated based on the AWS > WAF > Regex Pattern Set v2 Global > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Regex Pattern Set v2 Global > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2GlobalTags

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Global > Usage

The Usage control determines whether the number of AWS WAF regex pattern set v2 global resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Regex Pattern Set v2 Global > Usage policy, and set the limit with the AWS > WAF > Regex Pattern Set v2 Global > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2GlobalUsage

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Regional > Active

Take an action when an AWS WAF regex pattern set v2 regional is not active based on the
AWS > WAF > Regex Pattern Set v2 Regional > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Regex Pattern Set v2 Regional > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2RegionalActive

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Regional > Approved

Take an action when an AWS WAF regex pattern set v2 regional is not approved based on AWS > WAF > Regex Pattern Set v2 Regional > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2RegionalApproved

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Regional > CMDB

Record and synchronize details for the AWS WAF regex pattern set v2 regional into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > WAF > Regex Pattern Set v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2RegionalCmdb

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Regional > Discovery

Discover all AWS WAF regex pattern set v2 regional resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > WAF > Regex Pattern Set v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2RegionalDiscovery

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Regional > Tags

Take an action when an AWS WAF regex pattern set v2 regional tags is not updated based on the AWS > WAF > Regex Pattern Set v2 Regional > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Regex Pattern Set v2 Regional > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2RegionalTags

Parent

Category

Targets

AWS > WAF > Regex Pattern Set v2 Regional > Usage

The Usage control determines whether the number of AWS WAF regex pattern set v2 regional resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Regex Pattern Set v2 Regional > Usage policy, and set the limit with the AWS > WAF > Regex Pattern Set v2 Regional > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/regexPatternSetV2RegionalUsage

Parent

Category

Targets

AWS > WAF > Rule > Active

Take an action when an AWS WAF rule is not active based on the
AWS > WAF > Rule > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Rule > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleActive

Parent

Category

Targets

AWS > WAF > Rule > Approved

Take an action when an AWS WAF rule is not approved based on AWS > WAF > Rule > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleApproved

Parent

Category

Targets

AWS > WAF > Rule > CMDB

Record and synchronize details for the AWS WAF rule into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/ruleCmdb

Parent

Category

Targets

AWS > WAF > Rule > Discovery

Discover all AWS WAF rule resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/ruleDiscovery

Parent

Category

Targets

AWS > WAF > Rule > Usage

The Usage control determines whether the number of AWS WAF rule resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Rule > Usage policy, and set the limit with the AWS > WAF > Rule > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/ruleUsage

Parent

Category

Targets

AWS > WAF > Rule Group v2 Global > Active

Take an action when an AWS WAF rule group v2 global is not active based on the
AWS > WAF > Rule Group v2 Global > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Rule Group v2 Global > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2GlobalActive

Parent

Category

Targets

AWS > WAF > Rule Group v2 Global > Approved

Take an action when an AWS WAF rule group v2 global is not approved based on AWS > WAF > Rule Group v2 Global > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2GlobalApproved

Parent

Category

Targets

AWS > WAF > Rule Group v2 Global > CMDB

Record and synchronize details for the AWS WAF rule group v2 global into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2GlobalCmdb

Parent

Category

Targets

AWS > WAF > Rule Group v2 Global > Discovery

Discover all AWS WAF rule group v2 global resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2GlobalDiscovery

Parent

Category

Targets

AWS > WAF > Rule Group v2 Global > Tags

Take an action when an AWS WAF rule group v2 global tags is not updated based on the AWS > WAF > Rule Group v2 Global > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Rule Group v2 Global > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2GlobalTags

Parent

Category

Targets

AWS > WAF > Rule Group v2 Global > Usage

The Usage control determines whether the number of AWS WAF rule group v2 global resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Rule Group v2 Global > Usage policy, and set the limit with the AWS > WAF > Rule Group v2 Global > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2GlobalUsage

Parent

Category

Targets

AWS > WAF > Rule Group v2 Regional > Active

Take an action when an AWS WAF rule group v2 regional is not active based on the
AWS > WAF > Rule Group v2 Regional > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Rule Group v2 Regional > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2RegionalActive

Parent

Category

Targets

AWS > WAF > Rule Group v2 Regional > Approved

Take an action when an AWS WAF rule group v2 regional is not approved based on AWS > WAF > Rule Group v2 Regional > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2RegionalApproved

Parent

Category

Targets

AWS > WAF > Rule Group v2 Regional > CMDB

Record and synchronize details for the AWS WAF rule group v2 regional into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > WAF > Rule Group v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2RegionalCmdb

Parent

Category

Targets

AWS > WAF > Rule Group v2 Regional > Discovery

Discover all AWS WAF rule group v2 regional resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > WAF > Rule Group v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2RegionalDiscovery

Parent

Category

Targets

AWS > WAF > Rule Group v2 Regional > Tags

Take an action when an AWS WAF rule group v2 regional tags is not updated based on the AWS > WAF > Rule Group v2 Regional > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Rule Group v2 Regional > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2RegionalTags

Parent

Category

Targets

AWS > WAF > Rule Group v2 Regional > Usage

The Usage control determines whether the number of AWS WAF rule group v2 regional resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Rule Group v2 Regional > Usage policy, and set the limit with the AWS > WAF > Rule Group v2 Regional > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/ruleGroupV2RegionalUsage

Parent

Category

Targets

AWS > WAF > Web ACL > Active

Take an action when an AWS WAF web acl is not active based on the
AWS > WAF > Web ACL > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Web ACL > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/webaclActive

Parent

Category

Targets

AWS > WAF > Web ACL > Approved

Take an action when an AWS WAF web acl is not approved based on AWS > WAF > Web ACL > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/webaclApproved

Parent

Category

Targets

AWS > WAF > Web ACL > CMDB

Record and synchronize details for the AWS WAF web acl into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/webaclCmdb

Parent

Category

Targets

AWS > WAF > Web ACL > Discovery

Discover all AWS WAF web acl resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/webaclDiscovery

Parent

Category

Targets

AWS > WAF > Web ACL > Tags

Take an action when an AWS WAF web acl tags is not updated based on the AWS > WAF > Web ACL > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Web ACL > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/webaclTags

Parent

Category

Targets

AWS > WAF > Web ACL > Usage

The Usage control determines whether the number of AWS WAF web acl resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Web ACL > Usage policy, and set the limit with the AWS > WAF > Web ACL > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/webaclUsage

Parent

Category

Targets

AWS > WAF > Web ACL v2 Global > Active

Take an action when an AWS WAF web acl v2 global is not active based on the
AWS > WAF > Web ACL v2 Global > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Web ACL v2 Global > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2GlobalActive

Parent

Category

Targets

AWS > WAF > Web ACL v2 Global > Approved

Take an action when an AWS WAF web acl v2 global is not approved based on AWS > WAF > Web ACL v2 Global > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2GlobalApproved

Parent

Category

Targets

AWS > WAF > Web ACL v2 Global > CMDB

Record and synchronize details for the AWS WAF web acl v2 global into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

URI

tmod:@turbot/aws-waf#/control/types/webAclV2GlobalCmdb

Parent

Category

Targets

AWS > WAF > Web ACL v2 Global > Discovery

Discover all AWS WAF web acl v2 global resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2GlobalDiscovery

Parent

Category

Targets

AWS > WAF > Web ACL v2 Global > Tags

Take an action when an AWS WAF web acl v2 global tags is not updated based on the AWS > WAF > Web ACL v2 Global > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Web ACL v2 Global > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2GlobalTags

Parent

Category

Targets

AWS > WAF > Web ACL v2 Global > Usage

The Usage control determines whether the number of AWS WAF web acl v2 global resources exceeds the configured usage limit for this account.

You can configure the behavior of this control with the AWS > WAF > Web ACL v2 Global > Usage policy, and set the limit with the AWS > WAF > Web ACL v2 Global > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2GlobalUsage

Parent

Category

Targets

AWS > WAF > Web ACL v2 Regional > Active

Take an action when an AWS WAF web acl v2 regional is not active based on the
AWS > WAF > Web ACL v2 Regional > Active > * policies.

The Active control determines whether the resource is in active use, and if not, has
the ability to delete / cleanup the resource. When running an automated compliance
environment, it's common to end up with a wide range of alarms that are difficult
and time consuming to clear. The Active control brings automated, well-defined
control to this process.

The Active control checks the status of all defined Active policies for the
resource (AWS > WAF > Web ACL v2 Regional > Active > *),
raises an alarm, and takes the defined enforcement action. Each Active
sub-policy can calculate a status of active, inactive or skipped. Generally,
if the resource appears to be Active for any reason it will be considered Active.

Note the contrast with Approved, where if the resource appears to be Unapproved
for any reason it will be considered Unapproved.

See Active for more information.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2RegionalActive

Parent

Category

Targets

AWS > WAF > Web ACL v2 Regional > Approved

Take an action when an AWS WAF web acl v2 regional is not approved based on AWS > WAF > Web ACL v2 Regional > Approved > * policies.

The Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.

For any enforcement actions that specify if new, e.g., Enforce: Delete unapproved if new, this control will only take the enforcement actions for resources created within the last 60 minutes.

See Approved for more information.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2RegionalApproved

Parent

Category

Targets

AWS > WAF > Web ACL v2 Regional > CMDB

Record and synchronize details for the AWS WAF web acl v2 regional into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > WAF > Web ACL v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

URI

tmod:@turbot/aws-waf#/control/types/webAclV2RegionalCmdb

Parent

Category

Targets

AWS > WAF > Web ACL v2 Regional > Discovery

Discover all AWS WAF web acl v2 regional resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > WAF > Web ACL v2 Regional > Regions policy, the CMDB control will delete the resource from the CMDB.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2RegionalDiscovery

Parent

Category

Targets

AWS > WAF > Web ACL v2 Regional > Tags

Take an action when an AWS WAF web acl v2 regional tags is not updated based on the AWS > WAF > Web ACL v2 Regional > Tags > * policies.

If the resource is not updated with the tags defined in AWS > WAF > Web ACL v2 Regional > Tags > Template, this control raises an alarm and takes the defined enforcement action.

See Tags for more information.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2RegionalTags

Parent

Category

Targets

AWS > WAF > Web ACL v2 Regional > Usage

The Usage control determines whether the number of AWS WAF web acl v2 regional resources exceeds the configured usage limit for this region.

You can configure the behavior of this control with the AWS > WAF > Web ACL v2 Regional > Usage policy, and set the limit with the AWS > WAF > Web ACL v2 Regional > Usage > Limit policy.

URI

tmod:@turbot/aws-waf#/control/types/webAclV2RegionalUsage

Parent

Category

Targets