Skip to main content

🧠 AWS EC2 Security Group auto-provisioning status - prod.logic.yaml🟠🟢

Uses​

Test Results 🟢​

Generated at: 2026-09-22T15:05:16.122956417Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢test-aws-cloudformation-logical-id✔️ 199✔️ CA10__tagsJson__c.hasExact(bytes('aws:cloudformation:logical-id'))✔️ null
🟢test-aws-cloudformation-stack-id✔️ 299✔️ CA10__tagsJson__c.hasExact(bytes('aws:cloudformation:stack-id'))✔️ null
🟢test-aws-cloudformation-stack-name✔️ 399✔️ CA10__tagsJson__c.hasExact(bytes('aws:cloudformation:stack-name'))✔️ null
🟢test-aws-eks-cluster-name✔️ 499✔️ CA10__tagsJson__c.hasExact(bytes('aws:eks:cluster-name'))✔️ null
🟢test-aws-servicecatalog-portfolio-arn✔️ 599✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:portfolioArn'))✔️ null
🟢test-aws-servicecatalog-product-arn✔️ 699✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:productArn'))✔️ null
🟢test-aws-servicecatalog-provisioning-principal-arn✔️ 799✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:provisioningPrincipalArn'))✔️ null
🟢test-aws-servicecatalog-provisioned-product-arn✔️ 899✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:provisionedProductArn'))✔️ null
🟢test-aws-servicecatalog-provisioning-artifact-identifier✔️ 999✔️ CA10__tagsJson__c.hasExact(bytes('aws:servicecatalog:provisioningArtifactIdentifier'))✔️ null
🟢test-aws-application-migration-service-managed✔️ 1099✔️ CA10__tagsJson__c.getExact(bytes('AWSApplicationMigrationServiceManaged')) == 'mgn.amazonaws.com'✔️ null
🟢test-aws-elastic-disaster-recovery-managed✔️ 1199✔️ CA10__tagsJson__c.getExact(bytes('AWSElasticDisasterRecoveryManaged')) == 'drs.amazonaws.com'✔️ null
🟢test-elasticbeanstalk-environment-tags✔️ 1299✔️ CA10__tagsJson__c.hasExact(bytes('elasticbeanstalk:environment-name')) && CA10__tagsJson__c.hasExact(bytes('elasticbeanstalk:environment-id'))✔️ null
🟢test-no-automated-provisioning-tags✔️ 1300✔️ otherwise✔️ null
🟢test-aws-cloud9-tags-not-standalone-evidence✔️ 1300✔️ otherwise✔️ null
🟢test-eks-service-managed-tags-not-standalone-evidence✔️ 1300✔️ otherwise✔️ null
🟢test-elasticbeanstalk-single-tag-not-enough✔️ 1300✔️ otherwise✔️ null
🟢test-aws-application-migration-service-wrong-value✔️ 1300✔️ otherwise✔️ null

Generation Bundle​

FileMD5
Open/ce/ca/automated-provisioning/aws-ec2-security-group/policy.yamlF840FE1F5F297B5BE837498714270585
Open/ce/ca/automated-provisioning/aws-ec2-security-group/prod.logic.yaml02C58A8292159A1575AD68245CC0F26B
Open/ce/ca/automated-provisioning/aws-ec2-security-group/test-data.jsonF500BDDB6F8744F3CD09299CDEA9D668

Available Commands​

repo-manager policies generate FULL /ce/ca/automated-provisioning/aws-ec2-security-group/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/automated-provisioning/aws-ec2-security-group/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/automated-provisioning/aws-ec2-security-group/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/automated-provisioning/aws-ec2-security-group/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/automated-provisioning/aws-ec2-security-group/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsSecurityGroup__c"
testData:
  - file: "test-data.json"
conditions:
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS CloudFormation."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:cloudformation:logical-id"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS CloudFormation."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:cloudformation:stack-id"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS CloudFormation."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:cloudformation:stack-name"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is Amazon EKS."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:eks:cluster-name"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Service Catalog."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:servicecatalog:portfolioArn"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Service Catalog."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:servicecatalog:productArn"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Service Catalog."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:servicecatalog:provisioningPrincipalArn"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Service Catalog."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:servicecatalog:provisionedProductArn"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Service Catalog."
    check:
      TAG_EXISTS:
        name:
          BYTES: "aws:servicecatalog:provisioningArtifactIdentifier"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Application Migration Service."
    check:
      IS_EQUAL:
        left:
          TAG_VALUE_TEXT:
            name:
              BYTES: "AWSApplicationMigrationServiceManaged"
        right:
          TEXT: "mgn.amazonaws.com"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Elastic Disaster Recovery."
    check:
      IS_EQUAL:
        left:
          TAG_VALUE_TEXT:
            name:
              BYTES: "AWSElasticDisasterRecoveryManaged"
        right:
          TEXT: "drs.amazonaws.com"
  - status: "COMPLIANT"
    currentStateMessage: "The automated provisioning source is AWS Elastic Beanstalk."
    check:
      AND:
        args:
          - TAG_EXISTS:
              name:
                BYTES: "elasticbeanstalk:environment-name"
          - TAG_EXISTS:
              name:
                BYTES: "elasticbeanstalk:environment-id"
otherwise:
  status: "INCOMPLIANT"
  currentStateMessage: "The automated provisioning source is not identified by supported AWS-managed tag signals."
  remediationMessage: "Review the automated provisioning source, ownership, and expected management workflow."