Finish "Management and Governance" rules - Githubissues

pulumi / pulumi-policy-aws

A policy pack of rules to enforce AWS best practices for security, reliability, cost, and more!

https://www.pulumi.com

Apache License 2.0

34 stars 6 forks source link

Finish "Management and Governance" rules #12

Open ekrengel opened 4 years ago

ekrengel commented 4 years ago

Tracking Spreadsheet

[ ] cloudformation-stack-drift-detection-check
[ ] cloudformation-stack-notification-check
[ ] cloudtrail-enabled
[ ] cloud-trail-cloud-watch-logs-enabled
[ ] cloud-trail-encryption-enabled
[ ] cloud-trail-log-file-validation-enabled
[ ] cloudtrail-s3-dataevents-enabled
[ ] cloudwatch-alarm-action-check
[ ] cloudwatch-alarm-resource-check
[ ] cloudwatch-alarm-settings-check
[ ] cloudwatch-log-group-encrypted
[ ] codebuild-project-envvar-awscred-check
[ ] codebuild-project-source-repo-url-check
[ ] codepipeline-deployment-count-check
[ ] codepipeline-region-fanout-check
[ ] multi-region-cloud-trail-enabled
[ ] required-tags

Definition of Done:

Written in new API format
Configurable in an exported function - example
Unit tests
Integrations tests

chrsmith commented 4 years ago

@ekrengel I noticed this issue was in 20Q1-Svc but didn't have a milestone, so I added it to M0.32... but then realized removing it was probably intentional. So I removed the milestone and the 20Q1-Svc label... is that the intended state here? That this was pushed out from Q1?