Skip to main content

๐Ÿง  AWS RDS Instance Event Subscription for critical events is not configured - prod.logic.yaml๐ŸŸข

Usesโ€‹

Test Results ๐ŸŸขโ€‹

Generated at: 2025-12-27T12:02:08.506407006Z Open

ResultIdCondition IndexCondition TextRuntime Error
๐ŸŸข001โœ”๏ธ 199โœ”๏ธ CA10__AWS_RDS_Event_Subscriptions__r.has(COMPLIANT)โœ”๏ธ null
๐ŸŸข002โœ”๏ธ 200โœ”๏ธ otherwiseโœ”๏ธ null
๐ŸŸข003โœ”๏ธ 200โœ”๏ธ otherwiseโœ”๏ธ null

Generation Bundleโ€‹

FileMD5
Open/ce/ca/aws/rds/instance-event-subscription/policy.yamlB0F722A38EE2D2319216B172F6C599AA
Open/ce/ca/aws/rds/instance-event-subscription/prod.logic.yaml36F717B00B508DE2A72564C5BD11147E
Open/ce/ca/aws/rds/instance-event-subscription/test-data.jsonFF0F8C5AE6A9FD782BAA37190AA04388
Open/types/CA10__CaAwsDbEventSubscription__c/object.extracts.yamlCFB79FB71BF9EF5147DA4CFCE1DE4747

Available Commandsโ€‹

repo-manager policies generate FULL /ce/ca/aws/rds/instance-event-subscription/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/instance-event-subscription/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/instance-event-subscription/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/instance-event-subscription/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/instance-event-subscription/prod.logic.yaml

Contentโ€‹

Open File

---
inputType: "CA10__CaAwsAccount__c"
testData:
- file: test-data.json
conditions:
- status: "COMPLIANT"
currentStateMessage: "The RDS Event Subscription for critical Instance Events is configured."
check:
RELATED_LIST_HAS:
relationshipName: "CA10__AWS_RDS_Event_Subscriptions__r"
status: "COMPLIANT"
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "The RDS Event Subscription is not configured for critical Instance Events."
remediationMessage: "Configure RDS Event Subscription for critical Instance Events."
relatedLists:
- relationshipName: "CA10__AWS_RDS_Event_Subscriptions__r"
importExtracts:
- file: /types/CA10__CaAwsDbEventSubscription__c/object.extracts.yaml
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "This is not an active Instance Event Subscription."
check:
NOT:
arg:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__enabled__c"
right:
BOOLEAN: true
- IS_EQUAL:
left:
EXTRACT: "CA10__sourceType__c"
right:
TEXT: 'db-instance'
- status: "COMPLIANT"
currentStateMessage: "This is an Event Subscription for critical Instance Events."
check:
CONTAINS_ALL:
arg:
EXTRACT: "CA10__eventCategories__c"
search:
LIST:
itemType: TEXT
items: ["maintenance", "configuration change", "failure"]
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "This is an Event Subscription for non-critical Instance Events."