Remediate AWS CIS v3.0 and v4.0 with Flowpipe's interactive wizard →
Flowpipe Hub 
Hub
standard
turbot/aws_tags
Overview
72
Pipelines
69
Triggers
214
VariablesGitHub

Variables

The AWS Tags mod has 214 variables:

access_analyzers_with_incorrect_tags_trigger_enabled

Name
access_analyzers_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

access_analyzers_with_incorrect_tags_trigger_schedule

Name
access_analyzers_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

accessanalyzer_tag_rules

Name
accessanalyzer_tag_rules
Description
Access Analyzers specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

approvers

Name
approvers
Description
List of notifiers to be used for obtaining action/approval decisions, when empty list will perform the default response associated with the detection.
Type
list(notifier)
Default
notifier.default

base_tag_rules

Name
base_tag_rules
Description
Base rules to apply to resources unless overridden when merged with any provided resource-specific rules.
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
{
  "add": {},
  "remove": [],
  "remove_except": [],
  "update_keys": {},
  "update_values": {}
}

cloudfront_distributions_tag_rules

Name
cloudfront_distributions_tag_rules
Description
CloudFront distribution specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

cloudfront_distributions_with_incorrect_tags_trigger_enabled

Name
cloudfront_distributions_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

cloudfront_distributions_with_incorrect_tags_trigger_schedule

Name
cloudfront_distributions_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

cloudwatch_alarms_tag_rules

Name
cloudwatch_alarms_tag_rules
Description
CloudWatch Alarm specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

cloudwatch_alarms_with_incorrect_tags_trigger_enabled

Name
cloudwatch_alarms_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

cloudwatch_alarms_with_incorrect_tags_trigger_schedule

Name
cloudwatch_alarms_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

codebuild_projects_tag_rules

Name
codebuild_projects_tag_rules
Description
CodeBuild Project specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

codebuild_projects_with_incorrect_tags_trigger_enabled

Name
codebuild_projects_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

codebuild_projects_with_incorrect_tags_trigger_schedule

Name
codebuild_projects_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

codecommit_repositories_tag_rules

Name
codecommit_repositories_tag_rules
Description
CodeCommit Repository specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

codecommit_repositories_with_incorrect_tags_trigger_enabled

Name
codecommit_repositories_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

codecommit_repositories_with_incorrect_tags_trigger_schedule

Name
codecommit_repositories_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

codepipeline_pipelines_tag_rules

Name
codepipeline_pipelines_tag_rules
Description
CodePipeline Pipeline specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

codepipeline_pipelines_with_incorrect_tags_trigger_enabled

Name
codepipeline_pipelines_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

codepipeline_pipelines_with_incorrect_tags_trigger_schedule

Name
codepipeline_pipelines_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

config_rules_tag_rules

Name
config_rules_tag_rules
Description
Config Rule specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

config_rules_with_incorrect_tags_trigger_enabled

Name
config_rules_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

config_rules_with_incorrect_tags_trigger_schedule

Name
config_rules_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

database

Name
database
Description
Steampipe database connection string.
Type
connection.steampipe
Default
connection.steampipe.default

directory_service_directories_tag_rules

Name
directory_service_directories_tag_rules
Description
Directory Service Directory specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

directory_service_directories_with_incorrect_tags_trigger_enabled

Name
directory_service_directories_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

directory_service_directories_with_incorrect_tags_trigger_schedule

Name
directory_service_directories_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

dms_replication_instances_tag_rules

Name
dms_replication_instances_tag_rules
Description
DMS Replication Instance specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

dms_replication_instances_with_incorrect_tags_trigger_enabled

Name
dms_replication_instances_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

dms_replication_instances_with_incorrect_tags_trigger_schedule

Name
dms_replication_instances_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

dynamodb_tables_tag_rules

Name
dynamodb_tables_tag_rules
Description
DynamoDB Table specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

dynamodb_tables_with_incorrect_tags_trigger_enabled

Name
dynamodb_tables_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

dynamodb_tables_with_incorrect_tags_trigger_schedule

Name
dynamodb_tables_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ebs_snapshots_tag_rules

Name
ebs_snapshots_tag_rules
Description
EBS Snapshot specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ebs_snapshots_with_incorrect_tags_trigger_enabled

Name
ebs_snapshots_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ebs_snapshots_with_incorrect_tags_trigger_schedule

Name
ebs_snapshots_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ebs_volumes_tag_rules

Name
ebs_volumes_tag_rules
Description
EBS Volume specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ebs_volumes_with_incorrect_tags_trigger_enabled

Name
ebs_volumes_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ebs_volumes_with_incorrect_tags_trigger_schedule

Name
ebs_volumes_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ec2_application_load_balancers_tag_rules

Name
ec2_application_load_balancers_tag_rules
Description
EC2 Application Load Balancer specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ec2_application_load_balancers_with_incorrect_tags_trigger_enabled

Name
ec2_application_load_balancers_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ec2_application_load_balancers_with_incorrect_tags_trigger_schedule

Name
ec2_application_load_balancers_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ec2_classic_load_balancers_tag_rules

Name
ec2_classic_load_balancers_tag_rules
Description
EC2 Classic Load Balancer specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ec2_classic_load_balancers_with_incorrect_tags_trigger_enabled

Name
ec2_classic_load_balancers_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ec2_classic_load_balancers_with_incorrect_tags_trigger_schedule

Name
ec2_classic_load_balancers_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ec2_gateway_load_balancers_tag_rules

Name
ec2_gateway_load_balancers_tag_rules
Description
EC2 Gateway Load Balancer specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ec2_gateway_load_balancers_with_incorrect_tags_trigger_enabled

Name
ec2_gateway_load_balancers_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ec2_gateway_load_balancers_with_incorrect_tags_trigger_schedule

Name
ec2_gateway_load_balancers_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ec2_instances_tag_rules

Name
ec2_instances_tag_rules
Description
EC2 Instance specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ec2_instances_with_incorrect_tags_trigger_enabled

Name
ec2_instances_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ec2_instances_with_incorrect_tags_trigger_schedule

Name
ec2_instances_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ec2_network_load_balancers_tag_rules

Name
ec2_network_load_balancers_tag_rules
Description
EC2 Network Load Balancer specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ec2_network_load_balancers_with_incorrect_tags_trigger_enabled

Name
ec2_network_load_balancers_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ec2_network_load_balancers_with_incorrect_tags_trigger_schedule

Name
ec2_network_load_balancers_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ec2_reserved_instances_tag_rules

Name
ec2_reserved_instances_tag_rules
Description
EC2 Reserved Instance specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ec2_reserved_instances_with_incorrect_tags_trigger_enabled

Name
ec2_reserved_instances_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ec2_reserved_instances_with_incorrect_tags_trigger_schedule

Name
ec2_reserved_instances_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ecr_repositories_tag_rules

Name
ecr_repositories_tag_rules
Description
ECR Repository specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ecr_repositories_with_incorrect_tags_trigger_enabled

Name
ecr_repositories_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ecr_repositories_with_incorrect_tags_trigger_schedule

Name
ecr_repositories_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ecs_container_instances_tag_rules

Name
ecs_container_instances_tag_rules
Description
ECS Container Instance specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ecs_container_instances_with_incorrect_tags_trigger_enabled

Name
ecs_container_instances_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ecs_container_instances_with_incorrect_tags_trigger_schedule

Name
ecs_container_instances_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

ecs_services_tag_rules

Name
ecs_services_tag_rules
Description
ECS Service specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

ecs_services_with_incorrect_tags_trigger_enabled

Name
ecs_services_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

ecs_services_with_incorrect_tags_trigger_schedule

Name
ecs_services_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

efs_file_systems_tag_rules

Name
efs_file_systems_tag_rules
Description
EFS File System specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

efs_file_systems_with_incorrect_tags_trigger_enabled

Name
efs_file_systems_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

efs_file_systems_with_incorrect_tags_trigger_schedule

Name
efs_file_systems_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

eks_addons_tag_rules

Name
eks_addons_tag_rules
Description
EKS Addons specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

eks_addons_with_incorrect_tags_trigger_enabled

Name
eks_addons_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

eks_addons_with_incorrect_tags_trigger_schedule

Name
eks_addons_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

eks_clusters_tag_rules

Name
eks_clusters_tag_rules
Description
EKS Cluster specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

eks_clusters_with_incorrect_tags_trigger_enabled

Name
eks_clusters_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

eks_clusters_with_incorrect_tags_trigger_schedule

Name
eks_clusters_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

eks_identity_provider_configs_tag_rules

Name
eks_identity_provider_configs_tag_rules
Description
EKS identity provider configs specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

eks_identity_provider_configs_with_incorrect_tags_trigger_enabled

Name
eks_identity_provider_configs_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

eks_identity_provider_configs_with_incorrect_tags_trigger_schedule

Name
eks_identity_provider_configs_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

elastic_beanstalk_applications_tag_rules

Name
elastic_beanstalk_applications_tag_rules
Description
Elastic Beanstalk Application specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

elastic_beanstalk_applications_with_incorrect_tags_trigger_enabled

Name
elastic_beanstalk_applications_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

elastic_beanstalk_applications_with_incorrect_tags_trigger_schedule

Name
elastic_beanstalk_applications_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

elastic_beanstalk_environments_tag_rules

Name
elastic_beanstalk_environments_tag_rules
Description
Elastic Beanstalk Environment specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

elastic_beanstalk_environments_with_incorrect_tags_trigger_enabled

Name
elastic_beanstalk_environments_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

elastic_beanstalk_environments_with_incorrect_tags_trigger_schedule

Name
elastic_beanstalk_environments_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

elasticache_clusters_tag_rules

Name
elasticache_clusters_tag_rules
Description
ElastiCache Cluster specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

elasticache_clusters_with_incorrect_tags_trigger_enabled

Name
elasticache_clusters_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

elasticache_clusters_with_incorrect_tags_trigger_schedule

Name
elasticache_clusters_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

elasticsearch_domains_tag_rules

Name
elasticsearch_domains_tag_rules
Description
Elasticsearch Domain specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

elasticsearch_domains_with_incorrect_tags_trigger_enabled

Name
elasticsearch_domains_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

elasticsearch_domains_with_incorrect_tags_trigger_schedule

Name
elasticsearch_domains_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

eventbridge_rules_tag_rules

Name
eventbridge_rules_tag_rules
Description
EventBridge Rule specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

eventbridge_rules_with_incorrect_tags_trigger_enabled

Name
eventbridge_rules_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

eventbridge_rules_with_incorrect_tags_trigger_schedule

Name
eventbridge_rules_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

guardduty_detectors_tag_rules

Name
guardduty_detectors_tag_rules
Description
GuardDuty Detector specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

guardduty_detectors_with_incorrect_tags_trigger_enabled

Name
guardduty_detectors_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

guardduty_detectors_with_incorrect_tags_trigger_schedule

Name
guardduty_detectors_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

iam_roles_tag_rules

Name
iam_roles_tag_rules
Description
IAM Role specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

iam_roles_with_incorrect_tags_trigger_enabled

Name
iam_roles_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_roles_with_incorrect_tags_trigger_schedule

Name
iam_roles_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

iam_server_certificates_tag_rules

Name
iam_server_certificates_tag_rules
Description
IAM Server Certificate specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

iam_server_certificates_with_incorrect_tags_trigger_enabled

Name
iam_server_certificates_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_server_certificates_with_incorrect_tags_trigger_schedule

Name
iam_server_certificates_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

iam_users_tag_rules

Name
iam_users_tag_rules
Description
IAM User specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

iam_users_with_incorrect_tags_trigger_enabled

Name
iam_users_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

iam_users_with_incorrect_tags_trigger_schedule

Name
iam_users_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

incorrect_tags_default_action

Name
incorrect_tags_default_action
Description
The default action to take when no approvers are specified.
Type
string
notify, apply, skip
Default
notify

inspector_assessment_templates_tag_rules

Name
inspector_assessment_templates_tag_rules
Description
Inspector Assessment Template specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

inspector_assessment_templates_with_incorrect_tags_trigger_enabled

Name
inspector_assessment_templates_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

inspector_assessment_templates_with_incorrect_tags_trigger_schedule

Name
inspector_assessment_templates_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

kinesis_firehose_delivery_streams_tag_rules

Name
kinesis_firehose_delivery_streams_tag_rules
Description
Kinesis Firehose Delivery Stream specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

kinesis_firehose_delivery_streams_with_incorrect_tags_trigger_enabled

Name
kinesis_firehose_delivery_streams_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

kinesis_firehose_delivery_streams_with_incorrect_tags_trigger_schedule

Name
kinesis_firehose_delivery_streams_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

kms_keys_tag_rules

Name
kms_keys_tag_rules
Description
KMS Key specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

kms_keys_with_incorrect_tags_trigger_enabled

Name
kms_keys_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

kms_keys_with_incorrect_tags_trigger_schedule

Name
kms_keys_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

lambda_functions_tag_rules

Name
lambda_functions_tag_rules
Description
Lambda Function specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

lambda_functions_with_incorrect_tags_trigger_enabled

Name
lambda_functions_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

lambda_functions_with_incorrect_tags_trigger_schedule

Name
lambda_functions_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

max_concurrency

Name
max_concurrency
Description
The maximum concurrency to use for responding to detection items.
Type
number
Default
1

notification_level

Name
notification_level
Description
The verbosity level of notification messages to send.
Type
string
info, verbose, error
Default
info

notifier

Name
notifier
Description
The notifier to use for sending notification messages.
Type
notifier
Default
notifier.default

rds_db_cluster_parameter_groups_tag_rules

Name
rds_db_cluster_parameter_groups_tag_rules
Description
RDS DB Cluster Parameter Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_cluster_parameter_groups_with_incorrect_tags_trigger_enabled

Name
rds_db_cluster_parameter_groups_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_cluster_parameter_groups_with_incorrect_tags_trigger_schedule

Name
rds_db_cluster_parameter_groups_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_cluster_snapshots_tag_rules

Name
rds_db_cluster_snapshots_tag_rules
Description
RDS DB Cluster Snapshot specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_cluster_snapshots_with_incorrect_tags_trigger_enabled

Name
rds_db_cluster_snapshots_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_cluster_snapshots_with_incorrect_tags_trigger_schedule

Name
rds_db_cluster_snapshots_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_clusters_tag_rules

Name
rds_db_clusters_tag_rules
Description
RDS DB Cluster specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_clusters_with_incorrect_tags_trigger_enabled

Name
rds_db_clusters_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_clusters_with_incorrect_tags_trigger_schedule

Name
rds_db_clusters_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_instances_tag_rules

Name
rds_db_instances_tag_rules
Description
RDS DB Instance specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_instances_with_incorrect_tags_trigger_enabled

Name
rds_db_instances_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_instances_with_incorrect_tags_trigger_schedule

Name
rds_db_instances_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_option_groups_tag_rules

Name
rds_db_option_groups_tag_rules
Description
RDS DB Option Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_option_groups_with_incorrect_tags_trigger_enabled

Name
rds_db_option_groups_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_option_groups_with_incorrect_tags_trigger_schedule

Name
rds_db_option_groups_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_parameter_groups_tag_rules

Name
rds_db_parameter_groups_tag_rules
Description
RDS DB Parameter Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_parameter_groups_with_incorrect_tags_trigger_enabled

Name
rds_db_parameter_groups_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_parameter_groups_with_incorrect_tags_trigger_schedule

Name
rds_db_parameter_groups_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_snapshots_tag_rules

Name
rds_db_snapshots_tag_rules
Description
RDS DB Snapshot specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_snapshots_with_incorrect_tags_trigger_enabled

Name
rds_db_snapshots_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_snapshots_with_incorrect_tags_trigger_schedule

Name
rds_db_snapshots_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

rds_db_subnet_groups_tag_rules

Name
rds_db_subnet_groups_tag_rules
Description
RDS DB Subnet Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

rds_db_subnet_groups_with_incorrect_tags_trigger_enabled

Name
rds_db_subnet_groups_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

rds_db_subnet_groups_with_incorrect_tags_trigger_schedule

Name
rds_db_subnet_groups_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

redshift_clusters_tag_rules

Name
redshift_clusters_tag_rules
Description
Redshift Cluster specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

redshift_clusters_with_incorrect_tags_trigger_enabled

Name
redshift_clusters_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

redshift_clusters_with_incorrect_tags_trigger_schedule

Name
redshift_clusters_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

route53_domains_tag_rules

Name
route53_domains_tag_rules
Description
Route53 domain specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

route53_domains_with_incorrect_tags_trigger_enabled

Name
route53_domains_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

route53_domains_with_incorrect_tags_trigger_schedule

Name
route53_domains_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

route53_resolver_endpoints_tag_rules

Name
route53_resolver_endpoints_tag_rules
Description
Route53 resolver endpoint specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

route53_resolver_endpoints_with_incorrect_tags_trigger_enabled

Name
route53_resolver_endpoints_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

route53_resolver_endpoints_with_incorrect_tags_trigger_schedule

Name
route53_resolver_endpoints_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

s3_buckets_tag_rules

Name
s3_buckets_tag_rules
Description
S3 Bucket specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

s3_buckets_with_incorrect_tags_trigger_enabled

Name
s3_buckets_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

s3_buckets_with_incorrect_tags_trigger_schedule

Name
s3_buckets_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

sagemaker_endpoint_configurations_tag_rules

Name
sagemaker_endpoint_configurations_tag_rules
Description
SageMaker endpoint configuration specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

sagemaker_endpoint_configurations_with_incorrect_tags_trigger_enabled

Name
sagemaker_endpoint_configurations_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sagemaker_endpoint_configurations_with_incorrect_tags_trigger_schedule

Name
sagemaker_endpoint_configurations_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

sagemaker_models_tag_rules

Name
sagemaker_models_tag_rules
Description
SageMaker model specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

sagemaker_models_with_incorrect_tags_trigger_enabled

Name
sagemaker_models_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sagemaker_models_with_incorrect_tags_trigger_schedule

Name
sagemaker_models_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

sagemaker_notebook_instances_tag_rules

Name
sagemaker_notebook_instances_tag_rules
Description
SageMaker notebook instance specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

sagemaker_notebook_instances_with_incorrect_tags_trigger_enabled

Name
sagemaker_notebook_instances_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sagemaker_notebook_instances_with_incorrect_tags_trigger_schedule

Name
sagemaker_notebook_instances_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

sagemaker_training_jobs_tag_rules

Name
sagemaker_training_jobs_tag_rules
Description
SageMaker training job specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

sagemaker_training_jobs_with_incorrect_tags_trigger_enabled

Name
sagemaker_training_jobs_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sagemaker_training_jobs_with_incorrect_tags_trigger_schedule

Name
sagemaker_training_jobs_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

secrets_manager_secrets_with_incorrect_tags_trigger_enabled

Name
secrets_manager_secrets_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

secrets_manager_secrets_with_incorrect_tags_trigger_schedule

Name
secrets_manager_secrets_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

secretsmanager_secrets_tag_rules

Name
secretsmanager_secrets_tag_rules
Description
Secrets Manager secret specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_eip_tag_rules

Name
vpc_eip_tag_rules
Description
VPC EIP specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_eip_with_incorrect_tags_trigger_enabled

Name
vpc_eip_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

vpc_eip_with_incorrect_tags_trigger_schedule

Name
vpc_eip_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

vpc_nat_gateways_tag_rules

Name
vpc_nat_gateways_tag_rules
Description
VPC NAT Gateway specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_nat_gateways_with_incorrect_tags_trigger_enabled

Name
vpc_nat_gateways_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

vpc_nat_gateways_with_incorrect_tags_trigger_schedule

Name
vpc_nat_gateways_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

vpc_network_acls_tag_rules

Name
vpc_network_acls_tag_rules
Description
VPC Network ACL specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_network_acls_with_incorrect_tags_trigger_enabled

Name
vpc_network_acls_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

vpc_network_acls_with_incorrect_tags_trigger_schedule

Name
vpc_network_acls_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

vpc_security_groups_tag_rules

Name
vpc_security_groups_tag_rules
Description
VPC Security Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_security_groups_with_incorrect_tags_trigger_enabled

Name
vpc_security_groups_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

vpc_security_groups_with_incorrect_tags_trigger_schedule

Name
vpc_security_groups_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

vpc_tag_rules

Name
vpc_tag_rules
Description
VPC specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_vpn_connections_tag_rules

Name
vpc_vpn_connections_tag_rules
Description
VPC VPN Connection specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

vpc_vpn_connections_with_incorrect_tags_trigger_enabled

Name
vpc_vpn_connections_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

vpc_vpn_connections_with_incorrect_tags_trigger_schedule

Name
vpc_vpn_connections_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

vpc_with_incorrect_tags_trigger_enabled

Name
vpc_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

vpc_with_incorrect_tags_trigger_schedule

Name
vpc_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_ip_set_tag_rules

Name
wafv2_ip_set_tag_rules
Description
WAFV2 IPSet specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_ip_set_with_incorrect_tags_trigger_enabled

Name
wafv2_ip_set_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_ip_set_with_incorrect_tags_trigger_schedule

Name
wafv2_ip_set_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_ip_sets_tag_rules

Name
wafv2_ip_sets_tag_rules
Description
WAFV2 IPSet specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_ip_sets_with_incorrect_tags_trigger_enabled

Name
wafv2_ip_sets_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_ip_sets_with_incorrect_tags_trigger_schedule

Name
wafv2_ip_sets_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_regex_pattern_sets_tag_rules

Name
wafv2_regex_pattern_sets_tag_rules
Description
WAFV2 Regex Pattern specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_regex_pattern_sets_with_incorrect_tags_trigger_enabled

Name
wafv2_regex_pattern_sets_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_regex_pattern_sets_with_incorrect_tags_trigger_schedule

Name
wafv2_regex_pattern_sets_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_regex_pattern_tag_rules

Name
wafv2_regex_pattern_tag_rules
Description
WAFV2 Regex Pattern specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_regex_pattern_with_incorrect_tags_trigger_enabled

Name
wafv2_regex_pattern_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_regex_pattern_with_incorrect_tags_trigger_schedule

Name
wafv2_regex_pattern_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_rule_group_tag_rules

Name
wafv2_rule_group_tag_rules
Description
WAFV2 Rule Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_rule_group_with_incorrect_tags_trigger_enabled

Name
wafv2_rule_group_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_rule_group_with_incorrect_tags_trigger_schedule

Name
wafv2_rule_group_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_rule_groups_tag_rules

Name
wafv2_rule_groups_tag_rules
Description
WAFV2 Rule Group specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_rule_groups_with_incorrect_tags_trigger_enabled

Name
wafv2_rule_groups_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_rule_groups_with_incorrect_tags_trigger_schedule

Name
wafv2_rule_groups_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_web_acl_tag_rules

Name
wafv2_web_acl_tag_rules
Description
WAFV2 Web ACL specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_web_acl_with_incorrect_tags_trigger_enabled

Name
wafv2_web_acl_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_web_acl_with_incorrect_tags_trigger_schedule

Name
wafv2_web_acl_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

wafv2_web_acls_tag_rules

Name
wafv2_web_acls_tag_rules
Description
WAFV2 Web ACL specific tag rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

wafv2_web_acls_with_incorrect_tags_trigger_enabled

Name
wafv2_web_acls_with_incorrect_tags_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

wafv2_web_acls_with_incorrect_tags_trigger_schedule

Name
wafv2_web_acls_with_incorrect_tags_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m