Skip to content

For version 3.66, need to use presets for filters to be recognized properly #1011

Description

@salman121

This config worked for users with org SSO logins. Account #, cloud sso & IAMUserAccessKey: are masked:

regions:

  • global
  • us-east-1
  • us-east-2
  • us-west-1
  • us-west-2

account-blocklist:

  • "000000000000"

presets:
iam-protect:
filters:
IAMSAMLProvider:
- "cloudsso.org.com"

  IAMRole:
    - "admin"
    - "devops"
    - "OrganizationAccountAccessRole"
    - "AWSServiceRoleForOrganizations"

  IAMPolicy:
    - property: Name
      value: "AdministratorAccess"
    - property: Name
      value: "PowerUserAccess"

  IAMUser:
    - "admin"

  IAMUserAccessKey:
    - "admin -> ZZZZZZZZZZZZZZZZZZZZ"

  IAMUserPolicyAttachment:
    - "admin -> AdministratorAccess"

  IAMRolePolicyAttachment:
    - property: RoleName
      value: "admin"
    - property: RoleName
      value: "devops"
    - property: RoleName
      value: "OrganizationAccountAccessRole"

accounts:
"999999999999":
presets:
- iam-protect

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions