Control types for @turbot/aws-xray

• AWS > X-Ray > Encryption Config > CMDB
• AWS > X-Ray > Encryption Config > Discovery

AWS > X-Ray > Encryption Config > CMDB

Record and synchronize details for the AWS X-Ray encryption config into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB.

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

CMDB controls also use the Regions policy associated with the resource. If region is not in AWS > X-Ray > Encryption Config > Regions policy, the CMDB control will delete the resource from the CMDB. (Note: Setting CMDB to Skip will also pause these changes.)

AWS > X-Ray > Encryption Config > Discovery

Discover all AWS X-Ray encryption config resources and add them to the CMDB.

The Discovery control is responsible for finding resources of a specific type. It periodically searches for new resources and saves them to the CMDB. Once discovered, resources are then responsible for tracking changes to themselves through the CMDB control.

Note that Discovery and CMDB controls also use the Regions policy associated with the resource. If the region is not in AWS > X-Ray > Encryption Config > Regions policy, the CMDB control will delete the resource from the CMDB.