Skip to main content

🧠 AWS EC2 Instance IAM role is not attached - prod.logic.yaml 🟒

Flags​

Input Type​

TypeAPI NameExtractsExtract FilesLogic Files
πŸ”’πŸ“• AWS EC2 InstanceCA10__CaAwsInstance__c12244

Uses​

Test Results πŸŸ’β€‹

Generated at: 2025-04-24T23:44:30.424168181Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒a01βœ”οΈ 99βœ”οΈ isDisappeared(CA10__disappearanceTime__c)βœ”οΈ null
🟒a02βœ”οΈ 199βœ”οΈ extract('CA10__iamInstanceProfileArn__c').isNotEmpty()βœ”οΈ null
🟒a03βœ”οΈ 200βœ”οΈ otherwiseβœ”οΈ null

Generation​

FileMD5
Open/ce/ca/aws/ec2/instance-iam-role/policy.yaml9444BCA5431150BBAD5A75E80F3D6852
Open/ce/ca/aws/ec2/instance-iam-role/prod.logic.yaml78BF396827C8F90A7DBEBBC817501D75
Open/types/CA10__CaAwsInstance__c/object.extracts.yaml802FA80DBDE640AF85A69B42E51E0CCD
Open/ce/ca/aws/ec2/instance-iam-role/test-data.jsonFE3C2257B0089178EDFB3234391E48BB

Generate FULL script​

java -jar repo-manager.jar policies generate FULL /ce/ca/aws/ec2/instance-iam-role/prod.logic.yaml

Generate DEBUG script​

java -jar repo-manager.jar policies generate DEBUG /ce/ca/aws/ec2/instance-iam-role/prod.logic.yaml

Generate CAPTURE_TEST_DATA script​

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/aws/ec2/instance-iam-role/prod.logic.yaml

Generate TESTS script​

java -jar repo-manager.jar policies generate TESTS /ce/ca/aws/ec2/instance-iam-role/prod.logic.yaml

Execute tests​

java -jar repo-manager.jar policies test /ce/ca/aws/ec2/instance-iam-role/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsInstance__c"
testData:
- file: test-data.json
importExtracts:
- file: /types/CA10__CaAwsInstance__c/object.extracts.yaml
conditions:
- status: "COMPLIANT"
currentStateMessage: "The instance has an IAM role attached."
check:
NOT_EMPTY:
arg:
EXTRACT: "CA10__iamInstanceProfileArn__c"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The instance doesn't have an IAM role attached."
remediationMessage: "Consider attaching an IAM role to the instance."