Skip to main content

⭐ Repository → 📁 Compliance Engine → 📁 CloudAware → 📁 AWS → 📁 S3 → 🛡️ Bucket with Intelligent-Tiering is missing Archive configurations🟢

🧠 AWS S3 Bucket with Intelligent-Tiering is missing Archive configurations - prod.logic.yaml🟢

Uses​

Test Results 🟢​

Generated at: 2025-10-01T12:46:00.110758814Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟢001✔️ 99✔️ isDisappeared(CA10__disappearanceTime__c)✔️ null
🟢002✔️ 199✔️ extract('CA10__intelligentTieringStorageGb__c').isEmpty() && extract('caJsonFrom__lifecycleRulesJson__c').isEmpty()✔️ null
🟢003✔️ 299✔️ extract('CA10__intelligentTieringStorageGb__c').isEmpty() && extract('caJsonFrom__lifecycleRulesJson__c').jsonQueryText('length([?status==\'Enabled\'].transitions[] | [?storageClassAsString==\'INTELLIGENT_TIERING\'])') == number(0.0)✔️ null
🟢004✔️ 399✔️ extract('caJsonFrom__intelligentTieringConfigurationsJson__c').isEmpty()✔️ null
🟢005✔️ 399✔️ extract('caJsonFrom__intelligentTieringConfigurationsJson__c').isEmpty()✔️ null
🟢006✔️ 499✔️ extract('caJsonFrom__intelligentTieringConfigurationsJson__c').jsonQueryText('length(@)') == number(0.0)✔️ null
🟢007✔️ 599✔️ extract('caJsonFrom__intelligentTieringConfigurationsJson__c').jsonQueryText('length([?status==\'Enabled\'])') == number(0.0)✔️ null
🟢008✔️ 600✔️ otherwise✔️ null

Generation Bundle​

FileMD5
Open/ce/ca/aws/s3/bucket-intelligent-tiering-configuration/policy.yamlB9DE16FBD93956C48975515DBB635069
Open/ce/ca/aws/s3/bucket-intelligent-tiering-configuration/prod.logic.yaml2F904C9200503FE72AEA05C1B76F0945
Open/ce/ca/aws/s3/bucket-intelligent-tiering-configuration/test-data.json4C8B259B4B9D193DAFADDA406C0C6A3C
Open/types/CA10__CaAwsBucket__c/object.extracts.yaml2191662ECE28C46BA33E49CFC5DC1EBA

Available Commands​

repo-manager policies generate FULL /ce/ca/aws/s3/bucket-intelligent-tiering-configuration/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/s3/bucket-intelligent-tiering-configuration/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/s3/bucket-intelligent-tiering-configuration/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/s3/bucket-intelligent-tiering-configuration/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/s3/bucket-intelligent-tiering-configuration/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsBucket__c"
testData:
  - file: "test-data.json"
importExtracts:
  - file: "/types/CA10__CaAwsBucket__c/object.extracts.yaml"
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "The bucket doesn't store objects in Intelligent Tiering."
    check:
      AND:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10__intelligentTieringStorageGb__c"
          - IS_EMPTY:
              arg:
                EXTRACT: "caJsonFrom__lifecycleRulesJson__c"
  - status: "INAPPLICABLE"
    currentStateMessage: "The bucket doesn't store objects in Intelligent Tiering."
    check:
      AND:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10__intelligentTieringStorageGb__c"
          # returns true if there are no active lifecycle rules that move objects to INTELLIGENT_TIERING
          - IS_EQUAL:
              left:
                JSON_QUERY_NUMBER:
                  arg: 
                    EXTRACT: "caJsonFrom__lifecycleRulesJson__c"
                  expression: "length([?status=='Enabled'].transitions[] | [?storageClassAsString=='INTELLIGENT_TIERING'])"
                  undeterminedIf: 
                    evaluationError: "The JSON query has failed."
                    resultTypeMismatch: "The JSON query did not return a boolean."
              right:
                NUMBER: 0.0 
  - status: "INCOMPLIANT"
    currentStateMessage: "The bucket doesn't have an Intelligent Tiering configuration."
    remediationMessage: "Consider creating an S3 Intelligent Tiering configuration for the bucket."
    check:
      IS_EMPTY:
        arg:
          EXTRACT: "caJsonFrom__intelligentTieringConfigurationsJson__c"
  - status: "INCOMPLIANT"
    currentStateMessage: "The bucket doesn't have an Intelligent Tiering configuration."
    remediationMessage: "Consider creating an S3 Intelligent Tiering configuration for the bucket."
    check:
      IS_EQUAL:
        left:
          JSON_QUERY_NUMBER:
            arg:
              EXTRACT: "caJsonFrom__intelligentTieringConfigurationsJson__c"
            expression: "length(@)"
            undeterminedIf:
              evaluationError: "The JSON query has failed."
              resultTypeMismatch: "The JSON query did not return number type."
        right:
          NUMBER: 0.0 
  - status: "INCOMPLIANT"
    currentStateMessage: "The bucket Intelligent Tiering configuration is disabled."
    remediationMessage: "Consider enabling an S3 Intelligent Tiering configuration for the bucket."
    check:
      IS_EQUAL:
        left:
          JSON_QUERY_NUMBER:
            arg:
              EXTRACT: "caJsonFrom__intelligentTieringConfigurationsJson__c"
            expression: "length([?status=='Enabled'])"
            undeterminedIf:
              evaluationError: "The JSON query has failed."
              resultTypeMismatch: "The JSON query did not return number type."
        right:
          NUMBER: 0.0 
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "The bucket has an active Intelligent Tiering configuration."