๐ง AWS RDS Snapshot is not encrypted - prod.logic.yaml๐ข
- Contextual name: ๐ง prod.logic.yaml๐ข
- ID:
/ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml - Tags:
- ๐ข Logic test success
- ๐ข Logic with extracts
- ๐ข Logic with test data
Usesโ
Test Results ๐ขโ
Generated at: 2025-11-17T14:33:43.885394830Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| ๐ข | test1 | โ๏ธ 99 | โ๏ธ isDisappeared(CA10__disappearanceTime__c) | โ๏ธ null |
| ๐ข | test2 | โ๏ธ 299 | โ๏ธ not(extract('CA10__encrypted__c')) | โ๏ธ null |
| ๐ข | test3 | โ๏ธ 300 | โ๏ธ otherwise | โ๏ธ null |
| ๐ข | test4 | โ๏ธ 199 | โ๏ธ extract('CA10__status__c') != 'available' | โ๏ธ null |
Generation Bundleโ
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/rds/snapshot-encryption/policy.yaml | C77C26A4DB713E828A54FE1E8B3683F1 |
| Open | /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml | C7D7E0BA364BD67A32E488FBA2488991 |
| Open | /ce/ca/aws/rds/snapshot-encryption/test-data.json | B2BF9AB8C44BA8E9B1580284CC74FFCB |
| Open | /types/CA10__CaAwsDbSnapshot__c/object.extracts.yaml | 76C7D71A88222DC213DE94D7293929A3 |
Available Commandsโ
repo-manager policies generate FULL /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
Contentโ
---
inputType: "CA10__CaAwsDbSnapshot__c"
importExtracts:
- file: "/types/CA10__CaAwsDbSnapshot__c/object.extracts.yaml"
testData:
- file: "test-data.json"
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Snapshot is not in available status."
check:
NOT_EQUAL:
left:
EXTRACT: "CA10__status__c"
right:
TEXT: "available"
- status: "INAPPLICABLE"
currentStateMessage: "The RDS Snapshot is not encrypted."
remediationMessage: "Consider encrypting the snapshot by creating an encrypted copy and deleting the original."
check:
NOT:
arg:
EXTRACT: "CA10__encrypted__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The Snapshot is not encrypted."