cloud-custodian
https://github.com/cloud-custodian/cloud-custodian
Python
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported6 Subscribers
Add a CodeTriage badge to cloud-custodian
Help out
- Issues
- Azure: support backing-blob cleanup for Machine Learning data versions
- gcp - add dataproc cluster audit event hydration
- `aws.asg` tag/mark action crashes with `'dict' object has no attribute 'format'` on a value-spec (lookup) tag value
- `aws.glacier` tag actions fail with `NoLongerSupportedException` — AWS has retired the Glacier vault-tagging API surface
- Tag actions abort when the resource is deleted mid-run — tolerate resource-gone codes (`InvalidInstanceID.NotFound`, `SnapshotNotFoundFault`)
- `aws.cfn` tag/remove-tag is incompatible with `aws:TagKeys`-scoped IAM conditions (it re-sends the stack's full tag set on `UpdateStack`) — please document the contract
- c7n_org run_account: one AccessDenied policy skips every later policy for that account/region
- Fix offhours ScheduleParser.parse mishandling a space after ';'
- fix(c7n_org): include error detail in run_account AccessDenied log
- fix(c7n_org): stop forcing custodian.s3 logger to ERROR
- Docs
- Python not yet supported