cinq-auditor-required-tags

Please open issues in the Cloud-Inquisitor repository

Description

This auditor reviews, alerts and potentially takes action on AWS objects that are found not to be compliant with the tagging requirements.

Configuration Options

Option name	Default Value	Type	Description
alert_settings	See notes below	JSON	Alert and enforcement settings for supported resources
always_send_email	True	bool	Send emails even in collect mode
audit_ignore_tag	cinq_ignore	string	Cinq will ignore alerting/enforcement if resources are tagged with this
audit_scope	aws_ec2_instance	string	Select resources (aws_ec2_instance, aws_s3_bucket)
collect_only	True	bool	Do not shutdown resources, only update caches
confirm_shutdown	True	bool	Require manual confirmation before shutting down instances
email_subject	Resources missing required tags	string	Subject of the new issues email notifications
enabled	False	bool	Enable the Required Tags auditor
interval	30	int	How often the auditor executes, in minutes
partial_owner_match	False	bool	Allow partial matches of the Owner tag
permanent_recipient	[]	array	List of email addresses to receive all alerts
required_tags	[‘owner’, ‘accounting’, ‘name’]	array	List of required tags

Example - alert_settings:

{
    "*": {
        "alert": [
            "0 seconds",
            "15 days"
        ],
        "stop": None,
        "remove": "20 weeks",
        "scope": []
    },
    "aws_s3_bucket": {
        "alert": [
            "0 seconds",
            "30 days"
        ],
        "stop": None,
        "remove": "10 weeks",
        "scope": ["*"]
    },
    "aws_ec2_instance": {
        "alert": [
            "0 seconds",
            "14 days",
            "4 weeks"
        ],
        "stop": "8 weeks",
        "remove": "12 weeks",
        "scope": ["enabled-account-1", "enabled-account-2"]
    }
}

Development Status
- 4 - Beta
Environment
- Console
Framework
- Flask
- Sphinx
Intended Audience
- Information Technology
- System Administrators
License
- OSI Approved :: Apache Software License
Natural Language
- English
Operating System
Programming Language
- Python :: 3.5
- Python :: 3.6
Topic
- Security
- Utilities

Metadata

Development Status
- 4 - Beta
Environment
- Console
Framework
- Flask
- Sphinx
Intended Audience
- Information Technology
- System Administrators
License
- OSI Approved :: Apache Software License
Natural Language
- English
Operating System
Programming Language
- Python :: 3.5
- Python :: 3.6
Topic
- Security
- Utilities

Release files for cinq-auditor-required-tags 2.2.7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for cinq-auditor-required-tags 2.2.7
File	Size	Uploaded	Provenance
cinq-auditor-required-tags-2.2.7.tar.gz	12.4 kB	Nov 1, 2018	Without provenance	Details

Release files / cinq-auditor-required-tags-2.2.7.tar.gz

Download URL	cinq-auditor-required-tags-2.2.7.tar.gz
Size	12.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`5b1cd434f738c35414251389b4e84b23b132bebdbf1fb67341689660a6434bab`
BLAKE2b-256 checksum How to use checksums	`8c867bba8d59924bba439c83d4b164b356399b228c9a5448d434c5cb2bc36a1d`
Upload date	Nov 1, 2018
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/1.12.1 pkginfo/1.4.2 requests/2.18.4 setuptools/28.8.0 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/3.6.1`

Security for cinq-auditor-required-tags 2.2.7

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.