aws - ec2 svc id prefix for more resources

[kapilt]

multi resource events (ala create tags), need an id_prefix
distinction for disambiguation.


[JohnHillegass]

lgtm!

[JohnHillegass]

@kapilt what do you think about adding some more docs around event pattern matching? Was recently playing with something like this to only invoke on changes to certain tags.

      - name: detect-changes-to-only-certain-tags
        resource: aws.subnet
        mode:
          type: cloudtrail
          role: CustodianDemoRole
          events:
            - source: ec2.amazonaws.com
              event: CreateTags
              ids: requestParameters.resourcesSet.items[].resourceId
            - source: ec2.amazonaws.com
              event: DeleteTags
              ids: requestParameters.resourcesSet.items[].resourceId
          pattern:
            detail:
              requestParameters:
                resourcesSet:
                  items:
                    resourceId:
                      - prefix: sg-
                tagSet:
                  items:
                    key:
                      - prefix: c7n-
                      - MyTag

[kapilt]

additional pattern event matching in docs around cloud trail mode sounds good. docs are generally good as a rule :-)

…

On Thu, Mar 25, 2021 at 2:45 PM John Hillegass ***@***.***> wrote: @kapilt <https://github.com/kapilt> what do you think about adding some more docs around event pattern matching? Was recently playing with something like this to only invoke on changes to certain tags. - name: detect-changes-to-only-certain-tags resource: aws.subnet mode: type: cloudtrail role: CustodianDemoRole events: - source: ec2.amazonaws.com event: CreateTags ids: requestParameters.resourcesSet.items[].resourceId - source: ec2.amazonaws.com event: DeleteTags ids: requestParameters.resourcesSet.items[].resourceId pattern: detail: requestParameters: resourcesSet: items: resourceId: - prefix: sg- tagSet: items: key: - prefix: c7n- - MyTag — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#6566 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAFJEVI5UXAWVUYBJYF6WDTFOAGLANCNFSM4ZV7U5QA> .