RB
Is this a dupe of https://github.com/cloud-custodian/cloud-custodian/issues/1244 ?
I noticed the same issue. I don't see it in the schema. https://github.com/cloud-custodian/cloud-custodian/blob/00906a061341688cf7d19245d3a0126422ccfa82/c7n/resources/iam.py#L1803-L1808 The custodian code uses https://github.com/cloud-custodian/cloud-custodian/blob/00906a061341688cf7d19245d3a0126422ccfa82/c7n/resources/iam.py#L1913 which doesn't return the access key ids. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html An extra step can...
Some suggestions for pycon - https://github.com/cloud-custodian/cloud-custodian/issues/5895 - https://github.com/cloud-custodian/cloud-custodian/issues/6011 - https://github.com/cloud-custodian/cloud-custodian/issues/9481 - https://github.com/cloud-custodian/cloud-custodian/issues/10074 - https://github.com/cloud-custodian/cloud-custodian/issues/10141
Very nice! I updated the ticket with that filter. Do you think this is a good way forward? I was going to take a crack at a custom lambda but...
So we have a mixture of service packed AMIs and one golden AMI. Many of our services use our golden AMI so those could just use the regular expression without...
@kapilt wouldn't the `owners` be an attribute for the action `update-ami` ? e.g. ```yaml policies: - name: launch-configs-update-ami resource: aws.asg # or aws.launch-configs? filters: - type: image key: CreationDate value_type:...
Launch templates now support direct integration with ssm params for amis without needing to update the template so now we just update the ssm param it points to. Launch configs...
Please fill out the rest of the template. It would be good to know if this impacts the latest version
Hmmmm I didn't realize. Thank you! ```bash aws iam get-role --role-name task ``` Case # 1 - Single statement and `Service` is a string ```json { "Role": { "AssumeRolePolicyDocument": {...
@kapilt if it's not very easy, then perhaps we need a specific filter for this for `iam-role`. What do you think ?