需要审计证明书
cinq-auditor-required-tags的Python项目详细描述
请在Cloud-Inquisitor存储库中打开问题
说明
该审核员对发现不符合标记要求的aws对象进行审查、警告并可能采取行动。
配置选项
| Option name | Default Value | Type | Description |
|---|---|---|---|
| alert_settings | See notes below | JSON | Alert and enforcement settings for supported resources |
| always_send_email | True | bool | Send emails even in collect mode |
| audit_ignore_tag | cinq_ignore | string | Cinq will ignore alerting/enforcement if resources are tagged with this |
| audit_scope | aws_ec2_instance | string | Select resources (aws_ec2_instance, aws_s3_bucket) |
| collect_only | True | bool | Do not shutdown resources, only update caches |
| confirm_shutdown | True | bool | Require manual confirmation before shutting down instances |
| email_subject | Resources missing required tags | string | Subject of the new issues email notifications |
| enabled | False | bool | Enable the Required Tags auditor |
| interval | 30 | int | How often the auditor executes, in minutes |
| partial_owner_match | False | bool | Allow partial matches of the Owner tag |
| permanent_recipient | [] | array | List of email addresses to receive all alerts |
| required_tags | [‘owner’, ‘accounting’, ‘name’] | array | List of required tags |
示例-警报设置：
{"*":{"alert":["0 seconds","15 days"],"stop":None,"remove":"20 weeks","scope":[]},"aws_s3_bucket":{"alert":["0 seconds","30 days"],"stop":None,"remove":"10 weeks","scope":["*"]},"aws_ec2_instance":{"alert":["0 seconds","14 days","4 weeks"],"stop":"8 weeks","remove":"12 weeks","scope":["enabled-account-1","enabled-account-2"]}}
欢迎加入QQ群-->： 979659372
