Pick a rule, pick a resource, see what it catchesMost encryption rules only check value: false. Which of these three RDS instances does this one report? filters: - or: - type: value key: StorageEncrypted value: false - type: value keSep 16 · 4 min readgustavoortega.hashnode.dev
Cloud Custodian ships an engine and no rules. Here are 325.Cloud Custodian is an engine with no rules in it. You install it, write a policy, it works, you like it. You write another one. Months later there are thirty YAML files that different people wrote on Aug 3 · 6 min readgustavoortega.hashnode.dev
