Skip to main content

Configure AWS NAT Gateway Usage

  1. Configure AWS NAT Gateway Usage
  2. Use Case for AWS NAT Gateway Usage
  3. Triage Guides by Violation Type
    1. Triage AWS NAT Gateway Usage NATGATEWAY_NOT_AVAILABLE
    2. Triage AWS NAT Gateway Usage NATGATEWAY_UNUSED

How do I enable this policy?​

Signature:
  Type: Pyrae::Policy::PolicyDocument::Signatory
  Properties:
    SignatureTeamUrn: { "PyRef": "PyraeTeam" }
    PolicyUrn: "urn:pyrae:policy:us-west-2:sAutx4ZxiqTJUzJdvky2km:policy/AwsNatGatewayUsage"

What permissions does this policy require in my AWS account?​

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:DescribeNatGateways",
        "cloudwatch:GetMetricStatistics"
      ],
      "Resource": "*"
    }
  ]
}

What resources match this policy?​

Type: Pyrae::Observer::MatchingRule
Properties:
  MatchAccountType: aws
  MatchUrnService: ec2
  MatchUrnResourceType: nat-gateway