Notifications
Notifications
Filtering Notifications
You can use the notifications filter to search and filter notifications in the
Turbot Guardrails Console or using GraphQL queries.
-
The
notificationsfilter supports the standardsortandlimitkeywords -
You can search standard Guardrails metadata properties such as
timestamp,actor. Note that you cannot searchtitlebecause notifications do not have a title. -
The
typekeyword can filter on any specific notification types. -
Use the
notificationTypekeyword to filter on the general type of notifications. This will filter all create, update, and delete notifications of a given class. Supported values are: -
resource -
action -
policySetting -
policyValue -
control -
grant -
activeGrant -
You can filter the scope with Hierarchy Scope Filters. Note that these are implicitly set when filtering the notifications page in the Guardrails Console.
Supported keywords are:
resourcelevelresourceTyperesourceTypeIdresourceTypeLevelcontrolTypecontrolTypeIdcontrolTypeLevelpolicyTypepolicyTypeIdpolicyTypeLevel
Note the following limitations:
-
Tag filters do not work with notifications.
-
Full text search does not work with notifications.
-
You cannot use
$.to search and filter notifications
Examples
| Aim | Filter text |
|---|---|
| Notifications for resources, newest first | notificationType:resource sort:-timestamp |
| The last 100 deletion notifications of any type | notificationType:resourceDeleted,policySettingDeleted,policyValueDeleted,controlDeleted,actionDeleted,scheduledActionDeleted,grantDeleted,activeGrantsDeleted,favoriteDeleted,watchDeleted sort:-timestamp limit:100 |
| Recent permissions activity | notificationType:activeGrant,grant sort:-timestamp |
| Notifications for a resource and its descendants for the last 2 hours | resource:162675146433353 timestamp:>T-2h sort:-timestamp |
| Notifications for a resource only (NOT its descendants) | resource:162675146433353 level:self sort:-timestamp |
Control notifications related to AWS > S3 > Bucket > Approved |
notificationType:control controlType:tmod:@turbot/aws-s3#/control/types/bucketApproved sort:-timestamp |
Policy notifications for all AWS > S3 > Approved policies and sub-policies |
notificationType:policyValue,policySetting policyType:tmod:@turbot/aws-s3#/policy/types/bucketApproved sort:-timestamp |
| Notifications for a specific actor (user) with it's profileId | actorIdentityId:162674901433086 |