π§ AWS VPC Flow Logs are not enabled - prod.logic.yaml π π’
- Contextual name: π§ prod.logic.yaml π π’
- ID:
/ce/ca/aws/vpc/flow-logs/prod.logic.yaml
- Located in: π AWS VPC Flow Logs are not enabled π’
Flagsβ
- π’ Logic test success
- π’ Logic with test data
- π Logic without extracts
Input Typeβ
Type | API Name | Extracts | Extract Files | Logic Files | |
---|---|---|---|---|---|
π | π AWS VPC | CA10__CaAwsVpc__c | 1 |
Usesβ
- π§ͺ test-data.json
Test Results π’β
Generated at: 2025-04-24T23:45:13.511155769Z Open
Result | Id | Condition Index | Condition Text | Runtime Error |
---|---|---|---|---|
π’ | test1 | βοΈ 99 | βοΈ isDisappeared(CA10__disappearanceTime__c) | βοΈ null |
π’ | test2 | βοΈ 199 | βοΈ CA10__AWS_VPC_Flow_Logs__r.hasNo(COMPLIANT) | βοΈ null |
π’ | test3 | βοΈ 299 | βοΈ CA10__AWS_VPC_Flow_Logs__r.has(COMPLIANT) | βοΈ null |
Generationβ
File | MD5 | |
---|---|---|
Open | /ce/ca/aws/vpc/flow-logs/policy.yaml | 98648B19C189638D093C94D96B1BEB29 |
Open | /ce/ca/aws/vpc/flow-logs/prod.logic.yaml | ADB091B0EC642C429B6ACCCAE30C32D2 |
Open | /ce/ca/aws/vpc/flow-logs/test-data.json | 31DE834F1018FB3952D3AE87F3953DEB |
Generate FULL scriptβ
java -jar repo-manager.jar policies generate FULL /ce/ca/aws/vpc/flow-logs/prod.logic.yaml
Generate DEBUG scriptβ
java -jar repo-manager.jar policies generate DEBUG /ce/ca/aws/vpc/flow-logs/prod.logic.yaml
Generate CAPTURE_TEST_DATA scriptβ
java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/aws/vpc/flow-logs/prod.logic.yaml
Generate TESTS scriptβ
java -jar repo-manager.jar policies generate TESTS /ce/ca/aws/vpc/flow-logs/prod.logic.yaml
Execute testsβ
java -jar repo-manager.jar policies test /ce/ca/aws/vpc/flow-logs/prod.logic.yaml
Contentβ
---
inputType: "CA10__CaAwsVpc__c"
testData:
- file: "test-data.json"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "VPC flow logging is disabled."
remediationMessage: "Consider enabling VPC flow logging."
check:
RELATED_LIST_HAS_NO:
status: "COMPLIANT"
relationshipName: "CA10__AWS_VPC_Flow_Logs__r"
- status: "COMPLIANT"
currentStateMessage: "VPC flow logging is enabled."
check:
RELATED_LIST_HAS:
status: "COMPLIANT"
relationshipName: "CA10__AWS_VPC_Flow_Logs__r"
otherwise:
status: "UNDETERMINED"
currentStateMessage: "Unexpected values in the fields."
relatedLists:
- relationshipName: "CA10__AWS_VPC_Flow_Logs__r"
conditions: []
otherwise:
status: "COMPLIANT"
currentStateMessage: "VPC flow logging is enabled."