Skip to main content

🧠 AWS EC2 Instance auto-provisioning status - prod.logic.yaml🟠🟢

Uses

Test Results 🟢

Generated at: 2026-09-22T15:05:15.671324569Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢test-disappeared-ec2-instance✔️ 99✔️ isDisappeared(CA10__disappearanceTime__c)✔️ null
🟢test-aws-cloudformation-logical-id✔️ 199✔️ CA10__tagsJson__c.hasExact(bytes('aws:cloudformation:logical-id'))✔️ null
🟢test-aws-cloudformation-stack-id✔️ 299✔️ CA10__tagsJson__c.hasExact(bytes('aws:cloudformation:stack-id'))✔️ null
🟢test-aws-cloudformation-stack-name✔️ 399✔️ CA10__tagsJson__c.hasExact(bytes('aws:cloudformation:stack-name'))✔️ null
🟢test-aws-autoscaling-group-name✔️ 499✔️ CA10__tagsJson__c.hasExact(bytes('aws:autoscaling:groupName'))✔️ null
🟢test-emr-system-tags✔️ 599✔️ CA10__tagsJson__c.hasExact(bytes('aws:elasticmapreduce:job-flow-id')) && CA10__tagsJson__c.hasExact(bytes('aws:elasticmapreduce:instance-group-role'))✔️ null
🟢test-eks-managed-node-group-tags✔️ 699✔️ CA10__tagsJson__c.hasExact(bytes('eks:cluster-name')) && CA10__tagsJson__c.hasExact(bytes('eks:nodegroup-name'))✔️ null
🟢test-aws-servicecatalog-portfolioarn✔️ 799✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:portfolioArn'))✔️ null
🟢test-aws-servicecatalog-productarn✔️ 899✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:productArn'))✔️ null
🟢test-aws-servicecatalog-provisioningprincipalarn✔️ 999✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:provisioningPrincipalArn'))✔️ null
🟢test-aws-servicecatalog-provisionedproductarn✔️ 1099✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:provisionedProductArn'))✔️ null
🟢test-aws-servicecatalog-provisioningartifactidentifier✔️ 1199✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:provisioningArtifactIdentifier'))✔️ null
🟢test-aws-application-migration-service-managed✔️ 1299✔️ CA10__tagsJson__c.getExact(bytes('AWSApplicationMigrationServiceManaged')) == 'mgn.amazonaws.com'✔️ null
🟢test-aws-elastic-disaster-recovery-managed✔️ 1399✔️ CA10__tagsJson__c.getExact(bytes('AWSElasticDisasterRecoveryManaged')) == 'drs.amazonaws.com'✔️ null
🟢test-elasticbeanstalk-environment-tags✔️ 1499✔️ CA10__tagsJson__c.hasExact(bytes('elasticbeanstalk:environment-name')) && CA10__tagsJson__c.hasExact(bytes('elasticbeanstalk:environment-id'))✔️ null
🟢test-emr-single-tag-not-enough✔️ 1700✔️ otherwise✔️ null
🟢test-eks-single-tag-not-enough✔️ 1700✔️ otherwise✔️ null
🟢test-elasticbeanstalk-single-tag-not-enough✔️ 1700✔️ otherwise✔️ null
🟢test-mgn-unexpected-value-not-enough✔️ 1700✔️ otherwise✔️ null
🟢test-aws-eks-cost-tag-not-standalone-evidence✔️ 1700✔️ otherwise✔️ null
🟢test-launch-template-system-tags✔️ 1599✔️ CA10__tagsJson__c.hasExact(bytes('aws:ec2launchtemplate:id')) && CA10__tagsJson__c.hasExact(bytes('aws:ec2launchtemplate:version'))✔️ null
🟢test-ec2-fleet-tag✔️ 1699✔️ CA10__tagsJson__c.hasExact(bytes('aws:ec2:fleet-id'))✔️ null
🟢test-aws-batch-tag-not-standalone-evidence✔️ 1700✔️ otherwise✔️ null
🟢test-cloud9-system-tags-not-standalone-evidence✔️ 1700✔️ otherwise✔️ null
🟢test-no-supported-provisioning-tags✔️ 1700✔️ otherwise✔️ null

Generation Bundle

FileMD5
Open/ce/ca/automated-provisioning/aws-ec2-instance/policy.yaml816BE6DBECAB66E2AB42794245CC35BD
Open/ce/ca/automated-provisioning/aws-ec2-instance/prod.logic.yaml1A90FC29B7BABCBAC32FBE44AFC7D257
Open/ce/ca/automated-provisioning/aws-ec2-instance/test-data.json66610F57EADF027C67023D725CFDF7C2

Available Commands

repo-manager policies generate FULL /ce/ca/automated-provisioning/aws-ec2-instance/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/automated-provisioning/aws-ec2-instance/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/automated-provisioning/aws-ec2-instance/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/automated-provisioning/aws-ec2-instance/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/automated-provisioning/aws-ec2-instance/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAwsInstance__c"
testData:
- file: "test-data.json"
conditions:
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS CloudFormation."
check:
TAG_EXISTS:
name:
BYTES: "aws:cloudformation:logical-id"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS CloudFormation."
check:
TAG_EXISTS:
name:
BYTES: "aws:cloudformation:stack-id"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS CloudFormation."
check:
TAG_EXISTS:
name:
BYTES: "aws:cloudformation:stack-name"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is Amazon EC2 Auto Scaling."
check:
TAG_EXISTS:
name:
BYTES: "aws:autoscaling:groupName"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is Amazon EMR."
check:
AND:
args:
- TAG_EXISTS:
name:
BYTES: "aws:elasticmapreduce:job-flow-id"
- TAG_EXISTS:
name:
BYTES: "aws:elasticmapreduce:instance-group-role"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is Amazon EKS."
check:
AND:
args:
- TAG_EXISTS:
name:
BYTES: "eks:cluster-name"
- TAG_EXISTS:
name:
BYTES: "eks:nodegroup-name"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Service Catalog."
check:
TAG_EXISTS:
name:
BYTES: "aws:servicecatalog:portfolioArn"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Service Catalog."
check:
TAG_EXISTS:
name:
BYTES: "aws:servicecatalog:productArn"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Service Catalog."
check:
TAG_EXISTS:
name:
BYTES: "aws:servicecatalog:provisioningPrincipalArn"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Service Catalog."
check:
TAG_EXISTS:
name:
BYTES: "aws:servicecatalog:provisionedProductArn"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Service Catalog."
check:
TAG_EXISTS:
name:
BYTES: "aws:servicecatalog:provisioningArtifactIdentifier"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Application Migration Service."
check:
IS_EQUAL:
left:
TAG_VALUE_TEXT:
name:
BYTES: "AWSApplicationMigrationServiceManaged"
right:
TEXT: "mgn.amazonaws.com"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Elastic Disaster Recovery."
check:
IS_EQUAL:
left:
TAG_VALUE_TEXT:
name:
BYTES: "AWSElasticDisasterRecoveryManaged"
right:
TEXT: "drs.amazonaws.com"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is AWS Elastic Beanstalk."
check:
AND:
args:
- TAG_EXISTS:
name:
BYTES: "elasticbeanstalk:environment-name"
- TAG_EXISTS:
name:
BYTES: "elasticbeanstalk:environment-id"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is Amazon EC2 launch template."
check:
AND:
args:
- TAG_EXISTS:
name:
BYTES: "aws:ec2launchtemplate:id"
- TAG_EXISTS:
name:
BYTES: "aws:ec2launchtemplate:version"
- status: "COMPLIANT"
currentStateMessage: "The automated provisioning source is Amazon EC2 Fleet."
check:
TAG_EXISTS:
name:
BYTES: "aws:ec2:fleet-id"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The automated provisioning source is not identified by supported AWS-managed tag signals."
remediationMessage: "Review the automated provisioning source, ownership, and expected management workflow."