aws-samples / aws-iam-permissions-guardrails

AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/
https://aws-samples.github.io/aws-iam-permissions-guardrails/
Apache License 2.0
122 stars 42 forks source link

Vault-Lock-Policy #29

Open ajarawat1992 opened 3 years ago

ajarawat1992 commented 3 years ago

Use Case - Is your feature request related to a problem? Please describe. Vault Lock Policy that prevent Users from Deleting Glacier Archives Less Than 365 Days Old. Suppose that you have a regulatory requirement to retain archives for up to one year before you can delete them.

{ "Sid": "deny-based-on-archive-age", "Principal": "*", "Effect": "Deny", "Action": "glacier:DeleteArchive", "Resource": [ "arn:aws:glacier:us-west-2:123456789012:vaults/examplevault" ], "Condition": { "NumericLessThan" : { "glacier:ArchiveAgeInDays" : "365" } } }

Expected Outcome - Describe the solution you'd like Deny deleting Glacier Archives Less Than 365 Days Old.

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Affected AWS resource Mention the AWS resources which is affected

Impact High: The issue makes a service level improvement which affects all users of AWS Medium: Single feature which affects a single functionality which is optionally enabled in the AWS service Low: Niche use case which is particularly affecting the AWS resources if it is configured in a certain way

Supported material Can be either logs, screenshots or documentation links which provide evidence of need of this issue

I can contribute: Yes/No If you are able to contribute towards resolving this request.

Additional context Add any other context or screenshots about the feature request here.

Pull Request number If a pull request has already been created.