Skip to main content

๐Ÿง  AWS RDS Snapshot is not encrypted - prod.logic.yaml๐ŸŸข

Usesโ€‹

Test Results ๐ŸŸขโ€‹

Generated at: 2025-11-17T14:33:43.885394830Z Open

ResultIdCondition IndexCondition TextRuntime Error
๐ŸŸขtest1โœ”๏ธ 99โœ”๏ธ isDisappeared(CA10__disappearanceTime__c)โœ”๏ธ null
๐ŸŸขtest2โœ”๏ธ 299โœ”๏ธ not(extract('CA10__encrypted__c'))โœ”๏ธ null
๐ŸŸขtest3โœ”๏ธ 300โœ”๏ธ otherwiseโœ”๏ธ null
๐ŸŸขtest4โœ”๏ธ 199โœ”๏ธ extract('CA10__status__c') != 'available'โœ”๏ธ null

Generation Bundleโ€‹

FileMD5
Open/ce/ca/aws/rds/snapshot-encryption/policy.yamlC77C26A4DB713E828A54FE1E8B3683F1
Open/ce/ca/aws/rds/snapshot-encryption/prod.logic.yamlC7D7E0BA364BD67A32E488FBA2488991
Open/ce/ca/aws/rds/snapshot-encryption/test-data.jsonB2BF9AB8C44BA8E9B1580284CC74FFCB
Open/types/CA10__CaAwsDbSnapshot__c/object.extracts.yaml76C7D71A88222DC213DE94D7293929A3

Available Commandsโ€‹

repo-manager policies generate FULL /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/rds/snapshot-encryption/prod.logic.yaml

Contentโ€‹

Open File

---
inputType: "CA10__CaAwsDbSnapshot__c"
importExtracts:
- file: "/types/CA10__CaAwsDbSnapshot__c/object.extracts.yaml"
testData:
- file: "test-data.json"
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Snapshot is not in available status."
check:
NOT_EQUAL:
left:
EXTRACT: "CA10__status__c"
right:
TEXT: "available"
- status: "INAPPLICABLE"
currentStateMessage: "The RDS Snapshot is not encrypted."
remediationMessage: "Consider encrypting the snapshot by creating an encrypted copy and deleting the original."
check:
NOT:
arg:
EXTRACT: "CA10__encrypted__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "The Snapshot is not encrypted."