Skip to main content

Configure AWS Elasticsearch Domains should leverage ARM instances

  1. Configure AWS Elasticsearch Domains should leverage ARM instances
  2. Use Case for AWS Elasticsearch Domains should leverage ARM instances
  3. Triage Guides by Violation Type
    1. Triage AWS Elasticsearch Domains should leverage ARM instances NON_ARM_INSTANCE_TYPE_DETECTED

How do I enable this policy?​

Signature:
  Type: Pyrae::Policy::PolicyDocument::Signatory
  Properties:
    SignatureTeamUrn: { "PyRef": "PyraeTeam" }
    PolicyUrn: "urn:pyrae:policy:us-west-2:sAutx4ZxiqTJUzJdvky2km:policy/AwsElasticsearchDomainArm"

What permissions does this policy require in my AWS account?​

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "es:DescribeElasticsearchDomain"
      ],
      "Resource": "*"
    }
  ]
}

What resources match this policy?​

Type: Pyrae::Observer::MatchingRule
Properties:
  MatchAccountType: aws
  MatchUrnService: es
  MatchUrnResourceType: domain