module3/ec2-sechub-custom-actions.yml [1:13]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
policies:
  - name: DenySnapStop
    resource: ec2
    description: Deny all access by removing Instance Profile, Snapping the volume, and Stopping the Instance
    mode:
        type: hub-action
        role: arn:aws:iam::{account_id}:role/CloudCustodian
        member-role: arn:aws:iam::{account_id}:role/CloudCustodianMember
        memory: 128
        #packages: [botocore, boto3, urllib3, aws_xray_sdk]
        tags:
          CostCenter: SecurityHubWorkshop
          CreatedBy: CloudCustodian
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



module3/trace-ec2-sechub-custom-actions.yml [1:12]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
policies:
  - name: DenySnapStop
    resource: ec2
    description: Deny all access by removing Instance Profile, Snapping the volume, and Stopping the Instance
    mode:
        type: hub-action
        role: arn:aws:iam::{account_id}:role/CloudCustodian
        member-role: arn:aws:iam::{account_id}:role/CloudCustodianMember
        memory: 128
        tags:
          CostCenter: SecurityHubWorkshop
          CreatedBy: CloudCustodian
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



