Remediate AWS CIS v3.0 and v4.0 with Flowpipe's interactive wizard →
Flowpipe Hub 
Hub
standard
turbot/gcp_labels
Overview
12
Pipelines
9
Triggers
34
VariablesGitHub

Variables

The GCP Labels mod has 34 variables:

approvers

Name
approvers
Description
List of notifiers to be used for obtaining action/approval decisions, when empty list will perform the default response associated with the detection.
Type
list(notifier)
Default
notifier.default

base_label_rules

Name
base_label_rules
Description
Base rules to apply to resources unless overridden when merged with any provided resource-specific rules.
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
{
  "add": {},
  "remove": [],
  "remove_except": [],
  "update_keys": {},
  "update_values": {}
}

compute_disks_label_rules

Name
compute_disks_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

compute_disks_with_incorrect_labels_trigger_enabled

Name
compute_disks_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_disks_with_incorrect_labels_trigger_schedule

Name
compute_disks_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

compute_images_label_rules

Name
compute_images_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

compute_images_with_incorrect_labels_trigger_enabled

Name
compute_images_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_images_with_incorrect_labels_trigger_schedule

Name
compute_images_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

compute_instances_label_rules

Name
compute_instances_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

compute_instances_with_incorrect_labels_trigger_enabled

Name
compute_instances_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_instances_with_incorrect_labels_trigger_schedule

Name
compute_instances_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

compute_snapshots_label_rules

Name
compute_snapshots_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

compute_snapshots_with_incorrect_labels_trigger_enabled

Name
compute_snapshots_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

compute_snapshots_with_incorrect_labels_trigger_schedule

Name
compute_snapshots_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

database

Name
database
Description
Steampipe database connection string.
Type
connection.steampipe
Default
connection.steampipe.default

dataproc_clusters_label_rules

Name
dataproc_clusters_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

dataproc_clusters_with_incorrect_labels_trigger_enabled

Name
dataproc_clusters_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

dataproc_clusters_with_incorrect_labels_trigger_schedule

Name
dataproc_clusters_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

incorrect_labels_default_action

Name
incorrect_labels_default_action
Description
The default action to take when no approvers are specified.
Type
string
notify, apply, skip
Default
notify

max_concurrency

Name
max_concurrency
Description
The maximum concurrency to use for responding to detection items.
Type
number
Default
1

notification_level

Name
notification_level
Description
The verbosity level of notification messages to send.
Type
string
info, verbose, error
Default
info

notifier

Name
notifier
Description
The notifier to use for sending notification messages.
Type
notifier
Default
notifier.default

pubsub_subscriptions_label_rules

Name
pubsub_subscriptions_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

pubsub_subscriptions_with_incorrect_labels_trigger_enabled

Name
pubsub_subscriptions_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

pubsub_subscriptions_with_incorrect_labels_trigger_schedule

Name
pubsub_subscriptions_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

pubsub_topics_label_rules

Name
pubsub_topics_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

pubsub_topics_with_incorrect_labels_trigger_enabled

Name
pubsub_topics_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

pubsub_topics_with_incorrect_labels_trigger_schedule

Name
pubsub_topics_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

sql_database_instances_label_rules

Name
sql_database_instances_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

sql_database_instances_with_incorrect_labels_trigger_enabled

Name
sql_database_instances_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

sql_database_instances_with_incorrect_labels_trigger_schedule

Name
sql_database_instances_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m

storage_buckets_label_rules

Name
storage_buckets_label_rules
Description
Resource specific label rules
Type
object({
    add           = optional(map(string))
    remove        = optional(list(string))
    remove_except = optional(list(string))
    update_keys   = optional(map(list(string)))
    update_values = optional(map(map(list(string))))
  })
Default
-

storage_buckets_with_incorrect_labels_trigger_enabled

Name
storage_buckets_with_incorrect_labels_trigger_enabled
Description
If true, the trigger is enabled.
Type
bool
Default
false

storage_buckets_with_incorrect_labels_trigger_schedule

Name
storage_buckets_with_incorrect_labels_trigger_schedule
Description
The schedule on which to run the trigger if enabled.
Type
string
Default
15m