Cloud-custodian: AMI actions: Remove permissions

Created on 9 Jun 2016  路  2Comments  路  Source: cloud-custodian/cloud-custodian

We operate a "hub and spoke" VPC that builds AMIs for other accounts to use. Rather than deregistering AMIs I would like to revoke permissions on the AMI.

Another use case: enforce that AMIs are not being shared with other accounts.

areactions help wanted kinenhancement scopmedium statu0-triage
Source
picture eisenhowerj

Most helpful comment

both sounds good,

so an action like

policies:
   - name: yank-old-ami-access
     resources: ami
     filters:
        - image-age: 90
     actions:
        - remove-launch-permissions

with additional customization options re removing additional account access by id.

picture kapilt on 9 Jun 2016
👍2

All 2 comments

both sounds good,

so an action like

policies:
   - name: yank-old-ami-access
     resources: ami
     filters:
        - image-age: 90
     actions:
        - remove-launch-permissions

with additional customization options re removing additional account access by id.

kapilt picture kapilt on 9 Jun 2016
👍2

this was added in 0.8.19.5

kapilt picture kapilt on 14 Oct 2016
Was this page helpful?
0 / 5 - 0 ratings

Related issues

dbfr3qs picture dbfr3qs  路  3Comments
rracterr picture rracterr  路  6Comments
nitrocode picture nitrocode  路  3Comments
nitrocode picture nitrocode  路  4Comments
jtroberts83 picture jtroberts83  路  4Comments