Cloud Configuration Governance Policy form

Cloud Configuration Governance supports the following types:- Condition builder: The no-code method for creating policies. - Integration Hub Flow: The low-code method for creating policies. - Script: The code-based method for creating policies.

Select the show available keys icon (

Conditions for reporting the non-compliant cloud resource configuration. Always specify the key and value in a pair. Use the OR operator and the AND operator to perform logical operations in the policy condition.

Syntax

``` Key is Value

 For example,

 ```
Key is AWS:IAM:User:PasswordEnabled
Boolean Value is true

This field appears only when Condition Builder is selected from the Type field.

Configuration keys for the policy.

This field appears only when Integration Hub Flow is selected from the Type field.

The appropriate Integration Hub flow.

This field appears only when Integration Hub Flow is selected from the Type field.

Script that implements the policy conditions to identify and report the policy violations. Cloud Configuration Governance contains several scriptable objects and variables for use in the policy scripts. For more information see, Scripting reference.

You can create script includes to externalize the decision making and reuse the code across different scripts. For more information on creating the script includes, see Script includes.

Note: If you create a custom audit result record through the script, then the Audit Violation Reporting configuration defined in the policy doesn’t take effect.

This field appears only when Script is selected from the Type field.

Violation definition to be included in the audit violation report. Cloud Configuration Governance uses the violation definition to report the policy non-compliances.If an appropriate violation definition is not available, you can create one as follows:

1. Select the lookup using list icon (
   Image omitted: lookup-using-list.png
   Lookup using list icon.).</li>
2. Select New.
3. Enter a name that uniquely identifies the violation definition.

Cloud Configuration Governance includes the name of the violation definition in the audit issue report.

1. Select the default severity for the violation definition.
2. (Optional) Enter a brief description of the violation.