Migrating resources and filters from the EPAM repository

[dmytro-afanasiev]

GCP

• gcp.artifactregistry-repository gcp - add artifact-repository resource #8444
• gcp.artifactregistry-repository.filters.gcp-iam-policy-filter gcp - add artifact-repository resource #8444
• gcp.audit-config (no a use case)
• gcp.bigtable-instance gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519
• gcp.bigtable-instance-cluster gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519
• gcp.bigtable-instance-cluster-backup gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519
• gcp.bigtable-instance-cluster-backup.filters.time-range gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519
• gcp.bigtable-instance-table gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519
• gcp.bigtable-instance-table.filters.gcp-iam-policy-filter gc - added bigtable instance, bigtable instance cluster, bigtable ins… #8519 (reused iam-policy)
• gcp.bq-dataset-extended (no a use case)
• gcp.bq-table.filters.encryption-configuration-bigquery-filter gcp - big query - encrypt filter #8826 (the community added augmented, it's possible to use value filter)
• gcp.bucket.filters.gcp-iam-policy-filter (was added by the community)
• gcp.bucket-access-control-list gcp - added bucket-access-control-list #8678
• gcp.bucket-iam-policy (no a use case)
• gcp.datafusion-instance gcp - added datafusion #8676
• gcp.dataproc-clusters gcp - dataproc clusters #8677 (moved to dataproc.py)
• gcp.dataproc-clusters.filters.gcp-iam-policy-filter gcp - iam filters #8792 (reused iam-policy)
• gcp.dns-managed-zone.filters.dns-zone-records-sets-filter gcp - dns zone records filter #8829 (renamed to records-sets, updated the filter, please see in the description of the PR)
• gcp.dns-resource-records-sets (no a use case)
• gcp.firewall.filters.attached-to-cluster gcp - firewall filters, vpc dns policy filter #8814
• gcp.firewall.filters.port-range gcp - firewall filters, vpc dns policy filter #8814
• gcp.gce-project gcp - added gce-project, regions #8461 renamed to compute-project
• gcp.function.filters.gcp-iam-policy-filter gcp - iam filters #8792 (reused iam-policy)
• gcp.gcp-apikeys (already exists as gcp.api-key in iam.py)
• gcp.gcp-apikeys.filters.time-range Add time-range filter to api-keys #9612
• gcp.gcp-regions gcp - added gce-project, regions #8461 (renamed to gcp.region)
• gcp.gcp-secret gcp - added gcp-secret resource #8421 (renamed to gcp.secret)
• gcp.gcp-zones gcp - instance-group-manager, zone #8825 (renamed to zone)
• gcp.gke-cluster-beta-api (exists as gke-cluster)
• gcp.gke-nodepool.filters.iam-gke-nodepool-filter gcp - gke iam filter #8842 (reused iam-policy)
• gcp.image.filters.gcp-iam-policy-filter gcp - iam filters #8792 (reused iam-policy)
• gcp.instance.filters.instance-iam-policy-filter (no a use case)
• gcp.instance-group-managers gcp - instance-group-manager, zone #8825 (renamed to instance-group-manager)
• gcp.kms-keyring.filters.gcp-iam-policy-filter gcp - iam filters #8792 (reused iam-policy)
• gcp.kms-keyring-iam-policy-bindings (no a use case)
• gcp.kms-location.filters.kms-keyring gcp - kms keyring filter #8903 (renamed to keyring, removed string support)
• gcp.liens (no a use case)
• gcp.loadbalancer-backend-frontend gcp - loadbalancer-backend-frontend-ssl and loadbalancer-target-https-proxy-ssl-policy #8899
• gcp.loadbalancer-backend-frontend-ssl gcp - loadbalancer-backend-frontend-ssl and loadbalancer-target-https-proxy-ssl-policy #8899
• gcp.loadbalancer-target-https-proxy-ssl-policy gcp - loadbalancer-backend-frontend-ssl and loadbalancer-target-https-proxy-ssl-policy #8899
• gcp.log-project-metric.filters.alerts (no a use case)
• gcp.logging-alert-policy (no a use case)
• gcp.logging-metrics (no a use case)
• gcp.logging-sink gcp - logging-sink-bucket #8902
• gcp.logging-sink-bucket gcp - logging-sink-bucket #8902
• gcp.namespace-revision gcp - cloud run revision #8697 (moved into cloudrun.py and renamed to cloud-run-revision)
• gcp.namespace-revision.filters.namespace-revision-iam-policy-filter
• gcp.namespace-service (exists as cloud-run-service in cloudrun.py)
• gcp.namespace-service.filters.namespace-service-iam-filter
• gcp.notebook-instance gcp - added notebook instance #8680
• gcp.patch-deployment gcp - added patch deployment #8698
• gcp.project.filters.access-approval-filter (exists as access-approval)
• gcp.project.filters.audit-config-project-filter
• gcp.project.filters.log-project-sink-filter
• gcp.project.filters.logging-metrics-filter
• gcp.project.filters.precondition-check-filter
• gcp.project.filters.security-policy-filter
• gcp.project.filters.service-vuln-scanning-filter
• gcp.project-iam-policy-bindings (exists as iam-policy filter)
• gcp.project-iam-policy-bindings-by-members (exists as iam-policy filter)
• gcp.project-iam-policy-bindings-by-members.filters.new-roles-filter (exists as iam-policy filter)
• gcp.pubsub-topic.filters.gcp-iam-policy-filter gcp - iam filters #8792 (reused iam-policy)
• gcp.redis-instance gcp - added redis instance #8679
• gcp.security-policy gcp - added security policy #8666
• gcp.service-account-bindings
• gcp.service-account-bindings.filters.new-roles-iam-filter
• gcp.service-account-key-user (exists, service-account-key)
• gcp.snapshot.filters.disk-availability gcp - snapshot filters: disk availability #8900
• gcp.spanner-database-instance.filters.gcp-iam-policy-filter
• gcp.spanner-instance.filters.gcp-iam-policy-filter gcp - iam filters #8792 (reused iam-policy)
• gcp.spanner-instance-backup gcp - added spanner-instance-backup #8699 (renamed to spanner-backup)
• gcp.spanner-instance-backup.filters.gcp-iam-policy-filter gcp - spanner-backup: iam filter #8938 (renamed to spanner-backup, reused iam-policy)
• gcp.spanner-instance-backup.filters.time-range gcp - added spanner-instance-backup #8699 (renamed to spanner-backup)
• gcp.vpc.filters.vpc-dns-policy-filter gcp - firewall filters, vpc dns policy filter #8814
• gcp.vpc.filters.vpc-firewall-filter gcp - vpc-firewall-filter #8901 (filter is updated, please check the PR)
• gcp.web-security-scanner (no a use case)

AWS

• aws.account.filters.analyzer-findings-filter
• aws.account.filters.account-iam-role-light-filter
• aws.account.filters.cloudtrail-event-selector-filter
• aws.account.filters.cloudtrail-value
• aws.account.filters.cloudtrails
• aws.account.filters.config-recorder-filter
• aws.account.filters.configuration-changes-alarm-exists
• aws.account.filters.event-rule-filter
• aws.account.filters.rds-sns-subscription-filter
• aws.account.filters.status
• aws.api-stage (already exists)
• aws.api-stage.filters.tag-count
• aws.app-elb.filters.appelb-acm-filter
• aws.app-elb.filters.cidrip-security-group-appelb-filter
• aws.app-elb.filters.security-group-appelb-filter
• aws.app-flow.filters.appflow-kms-key-filter Add kms-key filter to app-flow #9456
• aws.app-flow.filters.value (surely exists)
• aws.appsync-graphql-api - not used
• aws.appsync-graphql-api.filters.api-cache-appsync - not used
• aws.cache-cluster.filters.redis-memcache-filter
• aws.cache-cluster.filters.vpc-elastic-cache-filter
• aws.cfn.filters.subscription
• aws.cloudsearch.filters.available-options-filter
• aws.cloudtrail.filters.cloudtrail-get-event-selectors-filter (not used)
• aws.cloudtrail.filters.cloudtrail-s3-filter
• aws.cloudtrail.filters.cloudtrail-s3-logging
• aws.cloudtrail.filters.configuration-changes-alarm-exists
• aws.codedeploy-group.filters.deployment-config-filter
• aws.dynamodb-table.filters.auto-scaling Add autoscaling filter for dynamodb table #9476
• aws.ebs.filters.snapshot-age - Add snapshots filter for aws.ebs #9451
• aws.ec2.filters.cidrip-security-group-ec2-filter
• aws.ec2.filters.security-group-ec2
• aws.ecs.filters.encryption-instance-id-ecs-filter
• aws.ecs.filters.include-settings-ecs
• aws.ecs-service.filters.ecs-task-definition-filter
• aws.eks.filters.cidr-egress-port-range-eks-filter
• aws.elasticbeanstalk-environment.filters.describe-configuration-settings-filter - we should workaround
• aws.elasticbeanstalk-environment.filters.elasticbeanstalk-configuration-settings-filter - Add elasticbeanstalk configuration-settings filter #9448 (renamed and changed)
• aws.elasticsearch.filters.elasticsearch-domain-filter Value filter mod operator #9497
• aws.elb.filters.cidr-egress-port-range-elb-filter
• aws.emr.filters.cluster-security-configuration
• aws.emr-serverless-app
• aws.fsx.filters.attached-volume-filter
• aws.fsx.filters.volumes-fsx
• aws.iam-certificate.filters.if-tags-exist-in-server-certificate
• aws.iam-policy-all - Apply query over extra_args #9449
• aws.iam-role-light
• aws.iam-user.filters.creation-time-aws-iam-user
• aws.kinesis.filters.kms-key-kinesis-filter
• aws.lambda.filters.awslambda-iam-role-policy-filter
• aws.lambda.filters.awslambda-signing-config-filter Add lambda signing config #9477
• aws.network-acl.filters.cidr-egress-port-range
• aws.rds.filters.endpoint-port
• aws.rds.filters.option-group-validation-rds-filter
• aws.rds.filters.rds-vpc-filter
• aws.rds.filters.vpc-security-group-inbound-ports
• aws.rds-cluster.filters.rds-cluster-parameter-filter
• aws.rest-api-v2
• aws.s3.filters.exist-action (seems like not used)
• aws.s3.filters.lock-configuration-filter Add object lock configuration to augment table #9532
• aws.s3-light
• aws.sqs.filters.redrive-policy-sqs-filter (can be implemented without filter)
• aws.ssm-service-setting (not used)
• aws.timestream-database (not used)
• aws.timestream-table (not used)
• aws.user-pool.filters.marked-for-op
• aws.vpc-endpoint-service
• aws.vpc-endpoint-service.filters.vpc-endpoint-service-configurations-filter
• aws.waf-rule-groups
• aws.workspaces.filters.security-group-workspace-filter
• aws.workspaces-directory.filters.check-vpc-endpoints-availability
• aws.workspaces-directory.filters.radius-settings

Azure

• [azure.activity-log|azure - added activity log and activity log alerts #8186]
• azure.api-management.filters.certificate Add api-management certificates filter #9413
• [azure.activity-log-alert|azure - added activity log and activity log alerts #8186]
• azure.alert-logs (already exists)
• azure.app-configuration azure - app-configuration #8997
• azure.automation-account azure - automation-account, automation-account.filters.variable-value #8999
• azure.automation-account.filters.variable-value azure - automation-account, automation-account.filters.variable-value #8999
• azure.datalake-analytics azure - datalake-analytics #8966
• azure.diagnostic-settings (we don't use it)
• azure.disk.filters.snapshots Add snapshots filter to azure.disk #9414
• azure.event-grid-domain azure - event-grid-domain #9000
• azure.event-grid-topic azure - event-grid-topic #9035
• azure.eventhub.filters.private-endpoint-connections azure - eventhub.filters.private-endpoint-connections #9037
• azure.front-door.filters.web-application-firewall-policies azure - front-door.filters.web-application-firewall-policies #9038
• azure.keyvault-by-subscription (it resembles the existing type, skipped)
• azure.keyvault-secret
• azure.kusto azure - kusho #8971
• azure.machine-learning-workspace azure - machine-learning-workspace #9039
• azure.machine-learning-workspace.filters.compute Add compute-instances filter to machine-learning-workspace #9412
• azure.mariadb-server azure - mariadb-server #9040
• azure.mysql-server (exists under name mysql, skipped)
• azure.mysql-server.filters.mysql-server-security-alert-policies-filter azure - mysql-server-security-alert-policies-filter #9042
• azure.mysql-server.filters.server-parameters (already exists under name server-configuration)
• azure.namespace (already exists under name servicebus-namespace, skipped)
• azure.network-watcher azure - network-watcher #8970
• azure.networksecuritygroup.filters.flow-analytics-logging azure - networksecuritygroup.filters.flow-analytics-logging #9044
• azure.networksecuritygroup.filters.flow-logs (already exists under the same name, skipped)
• azure.postgresql-server.filters.firewall-bypass azure - postgresql-server.filters #9041
• azure.postgresql-server.filters.server-configuration azure - postgresql-server.filters #9041
• azure.postgresql-server.filters.server-security-alert-policies-filter azure - postgresql-server.filters #9041
• azure.redis.filters.redis-firewall-filter azure - redis.filters.redis-firewall-filter #9045
• azure.security-assessments azure - defender-assessment, defender-contacts, defender-jit-policies, defender-jit-policies-filter #9061
• azure.security-auto-provisioning-settings (already exists under name defender-autoprovisioning)
• azure.security-contacts azure - defender-assessment, defender-contacts, defender-jit-policies, defender-jit-policies-filter #9061
• azure.security-jit-policies azure - defender-assessment, defender-contacts, defender-jit-policies, defender-jit-policies-filter #9061
• azure.security-jit-policies.filters.security-jit-policies-filter azure - defender-assessment, defender-contacts, defender-jit-policies, defender-jit-policies-filter #9061
• azure.security-pricing (already existed under name defender-pricing)
• azure.security-settings (already existed under name defender-setting)
• azure.signalr azure - signalr #9062
• azure.spring-cloud (already exists under name spring-service-instance)
• azure.sql-auditing-settings azure - azure.sql-auditing-settings #9097
• azure.sql-database.filters.data-encryption azure - sql-database.filters.data-encryption #9098
• azure.sql-managed-instance azure - sql-managed-instance and its filters #9113
• azure.sql-managed-instance.filters.encryption-protector azure - sql-managed-instance and its filters #9113
• azure.sql-managed-instance.filters.managed-server-security-alert-policies azure - sql-managed-instance and its filters #9113
• azure.sql-managed-instance.filters.vulnerability-assessments azure - sql-managed-instance and its filters #9113
• azure.sql-server.filters.failover-group-filter azure - sql-server.filters failover-group-filter sql-server-security-alert-policies #9114
• azure.sql-server.filters.sql-server-ad-admin (seems like it exists under name azure-ad-administrators skipped)
• azure.sql-server.filters.sql-server-security-alert-policies azure - sql-server.filters failover-group-filter sql-server-security-alert-policies #9114
• azure.sql-server.filters.transparent-data-encryption (already exists)
• azure.sql-server.filters.vulnerability-assessments azure - sql-server-vulnerability-assessments and sql-server.filters.vulnerability-assessments #9115 (similar one exists under name vulnerability-assessment (without -s))
• azure.sql-server-vulnerability-assessments azure - sql-server-vulnerability-assessments and sql-server.filters.vulnerability-assessments #9115
• azure.storage.filters.activity-log azure - storage.filters #9116
• azure.storage.filters.diagnostic-settings azure - storage.filters #9116 (storage-diagnostic-settings is the right name. I just updated it)
• azure.storage.filters.single-log-profile azure - storage.filters #9116
• azure.storage-container.filters.storage-single-log-profile azure - storage.filters #9116
• azure.stream-job azure - stream-job #9118
• azure.subscription.filters.activity-log-alert
• azure.subscription.filters.diagnostic-settings already exists
• azure.subscription.filters.network-watcher-filter azure.subscription.filters #9244
• azure.synapse azure.synapse #9240
• azure.vm.filters.backup-status azure.vm.filters.backup-status #9242
• azure.vm.filters.security-jit-policy
• azure.vnet.filters.network-interface-assignment add azure.vnet.filters.network-interface-assignment and azure.vnet.filters.subnet-application-gateway #9243
• azure.vnet.filters.subnet-application-gateway-vnet-filter add azure.vnet.filters.network-interface-assignment and azure.vnet.filters.subnet-application-gateway #9243
• azure.webapp-auth-settings - probably webapp.authentication filter can be used instead

All resources

Resource	Filters	Actions
aws.account	account-iam-role-light-filter
	analyzer-findings-filter
	cloudtrail-event-selector-filter
	cloudtrail-value
	cloudtrails
	config-recorder-filter
	configuration-changes-alarm-exists
	event-rule-filter
	rds-sns-subscription-filter
	status
aws.api-stage	tag-count
aws.app-elb	appelb-acm-filter
	cidrip-security-group-appelb-filter
	security-group-appelb-filter
aws.app-flow	appflow-kms-key-filter
	value
aws.appsync-graphql-api	api-cache-appsync
aws.cache-cluster	redis-memcache-filter
	vpc-elastic-cache-filter
aws.cfn	subscription
aws.cloudsearch	available-options-filter
aws.cloudtrail	cloudtrail-get-event-selectors-filter
	cloudtrail-s3-filter
	cloudtrail-s3-logging
	configuration-changes-alarm-exists
aws.codedeploy-group	deployment-config-filter
aws.dynamodb-table	auto-scaling
aws.ebs	snapshot-age
aws.ec2	cidrip-security-group-ec2-filter
	security-group-ec2
aws.ecs	encryption-instance-id-ecs-filter
	include-settings-ecs
aws.ecs-service	ecs-task-definition-filter
aws.eks	cidr-egress-port-range-eks-filter
aws.elasticbeanstalk-environment	describe-configuration-settings-filter
	elasticbeanstalk-configuration-settings-filter
aws.elasticsearch	elasticsearch-domain-filter
aws.elb	cidr-egress-port-range-elb-filter
aws.emr	cluster-security-configuration
aws.emr-serverless-app
aws.fsx	attached-volume-filter
	volumes-fsx
aws.iam-certificate	if-tags-exist-in-server-certificate
aws.iam-policy-all
aws.iam-role-light
aws.iam-user	creation-time-aws-iam-user
aws.kinesis	kms-key-kinesis-filter
aws.lambda	awslambda-iam-role-policy-filter
	awslambda-signing-config-filter
aws.network-acl	cidr-egress-port-range
aws.rds	endpoint-port
	option-group-validation-rds-filter
	rds-vpc-filter
	vpc-security-group-inbound-ports
aws.rds-cluster	rds-cluster-parameter-filter
aws.rest-api-v2
aws.s3	exist-action
	lock-configuration-filter
aws.s3-light
aws.secrets-manager		delete
		remove-statements
		set-encryption
aws.sqs	redrive-policy-sqs-filter
aws.ssm-service-setting
aws.timestream-database
aws.timestream-table
aws.user-pool		auto-tag-user
		copy-related-tag
		mark-for-op
		remove-tag
		tag
	marked-for-op
aws.vpc-endpoint-service	vpc-endpoint-service-configurations-filter
aws.waf-rule-groups
aws.workspaces	security-group-workspace-filter
aws.workspaces-directory	check-vpc-endpoints-availability
	radius-settings
azure.alert-logs
azure.app-configuration
azure.automation-account	variable-value
azure.container-group	diagnostic-settings
azure.containerservice	diagnostic-settings
azure.databricks	diagnostic-settings
azure.datalake-analytics
azure.diagnostic-settings
azure.disk	snapshots
azure.dnszone	diagnostic-settings
azure.event-grid-domain
azure.event-grid-topic
azure.eventhub	private-endpoint-connections
azure.front-door	web-application-firewall-policies
azure.image	diagnostic-settings
azure.keyvault-by-subscription
azure.keyvault-secret
azure.kusto
azure.machine-learning-workspace
azure.mariadb-server
azure.mysql-server	mysql-server-security-alert-policies-filter
	server-parameters
azure.namespace
azure.network-watcher
azure.networksecuritygroup	flow-analytics-logging
	flow-logs
azure.policyassignments	diagnostic-settings
azure.postgresql-server	firewall-bypass
	server-configuration
	server-security-alert-policies-filter
azure.redis	redis-firewall-filter
azure.resourcegroup	diagnostic-settings
azure.routetable	diagnostic-settings
azure.security-assessments
azure.security-auto-provisioning-settings
azure.security-contacts
azure.security-jit-policies	security-jit-policies-filter
azure.security-pricing
azure.security-settings
azure.signalr
azure.spring-cloud
azure.sql-auditing-settings
azure.sql-database	data-encryption
azure.sql-managed-instance	encryption-protector
	managed-server-security-alert-policies
	vulnerability-assessments
azure.sql-server	diagnostic-settings
	failover-group-filter
	sql-server-ad-admin
	sql-server-security-alert-policies
	transparent-data-encryption
	vulnerability-assessments
azure.sql-server-vulnerability-assessments
azure.storage	activity-log
	diagnostic-settings
	single-log-profile
azure.storage-container	storage-single-log-profile
azure.stream-job
azure.subscription	activity-log-alert
	diagnostic-settings
	network-watcher-filter
azure.synapse
azure.vm	backup-status
	security-jit-policy
azure.vmss	diagnostic-settings
azure.vnet	diagnostic-settings
	network-interface-assignment
	subnet-application-gateway-vnet-filter
azure.webapp-auth-settings
gcp.artifactregistry-repository	gcp-iam-policy-filter
gcp.audit-config
gcp.bigtable-instance
gcp.bigtable-instance-cluster
gcp.bigtable-instance-cluster-backup	time-range
gcp.bigtable-instance-table	gcp-iam-policy-filter
gcp.bq-dataset-extended
gcp.bq-table	encryption-configuration-bigquery-filter
gcp.bucket	gcp-iam-policy-filter
gcp.bucket-access-control-list
gcp.bucket-iam-policy
gcp.datafusion-instance
gcp.dataproc-clusters	gcp-iam-policy-filter
gcp.dns-managed-zone	dns-zone-records-sets-filter
gcp.dns-resource-records-sets
gcp.firewall	attached-to-cluster
	port-range
gcp.function	gcp-iam-policy-filter
gcp.gce-project
gcp.gcp-apikeys	time-range
gcp.gcp-regions
gcp.gcp-secret
gcp.gcp-zones
gcp.gke-cluster-beta-api
gcp.gke-nodepool	iam-gke-nodepool-filter
gcp.image	gcp-iam-policy-filter
gcp.instance	instance-iam-policy-filter
gcp.instance-group-managers
gcp.kms-keyring	gcp-iam-policy-filter
gcp.kms-keyring-iam-policy-bindings
gcp.kms-location	kms-keyring
gcp.liens
gcp.loadbalancer-backend-frontend
gcp.loadbalancer-backend-frontend-ssl
gcp.loadbalancer-target-https-proxy-ssl-policy
gcp.log-project-metric	alerts
gcp.logging-alert-policy
gcp.logging-metrics
gcp.logging-sink
gcp.logging-sink-bucket
gcp.namespace-revision	namespace-revision-iam-policy-filter
gcp.namespace-service	namespace-service-iam-filter
gcp.notebook-instance
gcp.patch-deployment
gcp.project	access-approval-filter
	audit-config-project-filter
	log-project-sink-filter
	logging-metrics-filter
	precondition-check-filter
	security-policy-filter
	service-vuln-scanning-filter
gcp.project-iam-policy-bindings
gcp.project-iam-policy-bindings-by-members	new-roles-filter
gcp.pubsub-topic	gcp-iam-policy-filter
gcp.redis-instance
gcp.security-policy
gcp.service-account-bindings	new-roles-iam-filter
gcp.service-account-key-user
gcp.snapshot	disk-availability
gcp.spanner-database-instance	gcp-iam-policy-filter
gcp.spanner-instance	gcp-iam-policy-filter
gcp.spanner-instance-backup	gcp-iam-policy-filter
	time-range
gcp.vpc	vpc-dns-policy-filter
	vpc-firewall-filter
gcp.web-security-scanner