🧠 AWS VPC is not configured with a VPC Endpoint for Amazon EC2 service - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 AWS VPC
• 🔌 AWS VPC Endpoint - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2026-02-07T12:02:51.800300493Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ CA10__AWS_EC2_Instances__r.hasNo(COMPLIANT)	✔️ null
🟢	test3	✔️ 299	✔️ CA10__AWS_VPC_Endpoints__r.has(COMPLIANT)	✔️ null
🟢	test4	✔️ 300	✔️ otherwise	✔️ null
🟢	test5	✔️ 300	✔️ otherwise	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/aws/vpc/no-ec2-vpc-endpoint/policy.yaml	ED2535C5D59E1A141B86985F181468FE
Open	/ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml	FC569F51B3062217B6FC65D33AB01823
Open	/ce/ca/aws/vpc/no-ec2-vpc-endpoint/test-data.json	7BFBC58DDAD61586C6E411FEBA00A2BC
Open	/types/CA10__CaAwsVpcEndpoint__c/object.extracts.yaml	A6696F89483514817E2BC1EB05B183F6

Available Commands

repo-manager policies generate FULL /ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/vpc/no-ec2-vpc-endpoint/prod.logic.yaml

Content

Open File

inputType: "CA10__CaAwsVpc__c"
testData:
  - file: "test-data.json"
conditions:
  - status: "INAPPLICABLE"
    currentStateMessage: "This VPC doesn't have any EC2 Instances."
    check:
      RELATED_LIST_HAS_NO:
        status: "COMPLIANT"
        relationshipName: "CA10__AWS_EC2_Instances__r"
  - status: "COMPLIANT"
    currentStateMessage: "The VPC has an active VPC Endpoint for the EC2 service."
    check:
      RELATED_LIST_HAS:
        status: "COMPLIANT"
        relationshipName: "CA10__AWS_VPC_Endpoints__r"
otherwise:
  status: "INCOMPLIANT"
  currentStateMessage: "The VPC does not have an active VPC Endpoint for the EC2 service."
  remediationMessage: "Consider creating a VPC Endpoint for the Amazon EC2 service to ensure that traffic between your VPC and EC2 does not leave the Amazon network."
relatedLists:
  - relationshipName: "CA10__AWS_EC2_Instances__r"
    conditions: []
    otherwise:
      status: "COMPLIANT"
      currentStateMessage: "This is an EC2 Instance."
  - relationshipName: "CA10__AWS_VPC_Endpoints__r"
    importExtracts:
      - file: /types/CA10__CaAwsVpcEndpoint__c/object.extracts.yaml
    conditions:
      - status: "COMPLIANT"
        currentStateMessage: "This is an active VPC Endpoint for the EC2 service."
        check:
          AND:
            args:
              - IS_EQUAL:
                  left:
                    EXTRACT: "CA10__endpointServiceId__c"
                  right:
                    TEXT: "ec2"
              - IS_EQUAL:
                  left:
                    EXTRACT: "CA10__state__c"
                  right:
                    TEXT: "available"
    otherwise:
      status: "INAPPLICABLE"
      currentStateMessage: "This is not an active VPC Endpoint for the EC2 service."