Notifications

Filtering Notifications

You can use the notifications filter to search and filter notifications in the Turbot Guardrails Console or using GraphQL queries.

  • The notifications filter supports the standard sort and limit keywords

  • You can search standard Guardrails metadata properties such as timestamp, actor. Note that you cannot search title because notifications do not have a title.

  • The type keyword can filter on any specific notification types.

  • Use the notificationType keyword to filter on the general type of notifications. This will filter all create, update, and delete notifications of a given class. Supported values are:

  • resource

  • action

  • policySetting

  • policyValue

  • control

  • grant

  • activeGrant

  • You can filter the scope with Hierarchy Scope Filters. Note that these are implicitly set when filtering the notifications page in the Guardrails Console.

Supported keywords are:

  • resource
  • level
  • resourceType
  • resourceTypeId
  • resourceTypeLevel
  • controlType
  • controlTypeId
  • controlTypeLevel
  • policyType
  • policyTypeId
  • policyTypeLevel

Note the following limitations:

  • Tag filters do not work with notifications.

  • Full text search does not work with notifications.

  • You cannot use $. to search and filter notifications

Examples

AimFilter text
Notifications for resources, newest firstnotificationType:resource sort:-timestamp
The last 100 deletion notifications of any typenotificationType:resourceDeleted,policySettingDeleted,policyValueDeleted,controlDeleted,actionDeleted,scheduledActionDeleted,grantDeleted,activeGrantsDeleted,favoriteDeleted,watchDeleted sort:-timestamp limit:100
Recent permissions activitynotificationType:activeGrant,grant sort:-timestamp
Notifications for a resource and its descendants for the last 2 hoursresource:162675146433353 timestamp:>T-2h sort:-timestamp
Notifications for a resource only (NOT its descendants)resource:162675146433353 level:self sort:-timestamp
Control notifications related to AWS > S3 > Bucket > ApprovednotificationType:control controlType:tmod:@turbot/aws-s3#/control/types/bucketApproved sort:-timestamp
Policy notifications for all AWS > S3 > Approved policies and sub-policiesnotificationType:policyValue,policySetting policyType:tmod:@turbot/aws-s3#/policy/types/bucketApproved sort:-timestamp
Notifications for a specific actor (user) with it's profileIdactorIdentityId:162674901433086