diff --git a/.dangerfile/policy_tests.rb b/.dangerfile/policy_tests.rb index 3e4be82fab..aba3280434 100644 --- a/.dangerfile/policy_tests.rb +++ b/.dangerfile/policy_tests.rb @@ -68,6 +68,40 @@ def policy_bad_filename_casing?(file) return false end +### README Link test +# Verify that the readme in the short_description is valid +def policy_bad_readme_link?(file) + fail_message = "" + + pp = PolicyParser.new + pp.parse(file) + short_description = pp.parsed_short_description + + file_path = file.split('/') + file_path.pop + file_url = "https://github.com/flexera-public/policy_templates/tree/master/" + file_path.join('/') + + url_regex = /https:\/\/[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)+(?:\/[^\s]*[^\s)])?/ + url_list = short_description.scan(url_regex) + + good_urls = 0 + bad_urls = 0 + + url_list.each do |url| + if url.include?("github.com") + bad_urls += 1 if url != file_url && url != file_url + "/" + good_urls += 1 unless url != file_url && url != file_url + "/" + end + end + + if bad_urls > 0 || good_urls == 0 + fail_message = "**#{file}**\nPolicy `short_description` is missing a valid link to the policy README. Please ensure that the following link is present in the `short_description`:\n\n#{file_url}/" + end + + return fail_message.strip if !fail_message.empty? + return false +end + ### Publish test # Return false if policy info block is missing publish field or publish is set to a value other than "false" def policy_unpublished?(file) diff --git a/.github/workflows/test-policies.yaml b/.github/workflows/test-policies.yaml index 4c146adfc6..46b2a0b64c 100644 --- a/.github/workflows/test-policies.yaml +++ b/.github/workflows/test-policies.yaml @@ -8,6 +8,11 @@ on: branches: - master + # Workflow dispatch trigger allows manually running workflow + workflow_dispatch: + branches: + - master + jobs: policy_test: name: "Policy Test" diff --git a/.github/workflows/update-active-policy-list.yaml b/.github/workflows/update-active-policy-list.yaml index e885df1372..397591baf8 100644 --- a/.github/workflows/update-active-policy-list.yaml +++ b/.github/workflows/update-active-policy-list.yaml @@ -10,6 +10,11 @@ on: types: - completed + # Workflow dispatch trigger allows manually running workflow + workflow_dispatch: + branches: + - master + jobs: policy_list: name: "Update Active Policy List" diff --git a/Dangerfile b/Dangerfile index 3acc161fb3..a3a0fcedd4 100644 --- a/Dangerfile +++ b/Dangerfile @@ -203,6 +203,9 @@ changed_pt_files.each do |file| # Raise error if policy filename/path contains any uppercase letters test = policy_bad_filename_casing?(file); fail test if test + # Raise error if policy short_description is missing valid README link + test = policy_bad_readme_link?(file); fail test if test + # Raise warning if policy won't be published test = policy_unpublished?(file); warn test if test diff --git a/Gemfile b/Gemfile index b61895c531..30c1416b72 100644 --- a/Gemfile +++ b/Gemfile @@ -11,3 +11,4 @@ gem "danger-rubocop", "~> 0.12.0" gem "pry", "~> 0.14.2" gem "rb-readline", "~> 0.5.5" gem "mdl", "~> 0.13.0" +gem "octokit", "~> 8.1.0" diff --git a/Gemfile.lock b/Gemfile.lock index c75a00618f..3980ac2982 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -135,6 +135,7 @@ DEPENDENCIES danger-textlint (~> 2.0.4) json (~> 2.7) mdl (~> 0.13.0) + octokit (~> 8.1.0) pry (~> 0.14.2) rake (~> 13.1.0) rb-readline (~> 0.5.5) diff --git a/Rakefile b/Rakefile index 1e53f4f5e2..ff3ccfa78d 100644 --- a/Rakefile +++ b/Rakefile @@ -1,23 +1,32 @@ require 'rubygems' require 'json' require 'fileutils' +require 'octokit' +require 'uri' +require 'time' require_relative '.dangerfile/policy_parser' -# the list of policies is consumed by the tools/policy_sync/policy_sync.pt +# The list of policies is consumed by the tools/policy_sync/policy_sync.pt # and the docs.rightscale.com build to generate the policies/user/policy_list.html # the file is uploaded to S3 during a merge to master deploy step in .travis.yml desc "Create a list of active policies to be published to the Public Policy Catalog" + task :generate_policy_list do + # Preparation for getting information from Github repository + repo_name = "flexera-public/policy_templates" + branch = "master" + github_client = Octokit::Client.new + FileUtils.mkdir_p 'dist' file_list = [] - Dir['**/*.pt'].reject{ |f| f['msp/'] }.each do |file| - change_log = ::File.join(file.split('/')[0...-1].join('/'),'CHANGELOG.md') - readme = ::File.join(file.split('/')[0...-1].join('/'),'README.md') - publish = true - if !file.match(/test_code/) - f = File.open(file, "r:bom|utf-8") + Dir['**/*.pt'].each do |file| + change_log = ::File.join(file.split('/')[0...-1].join('/'), 'CHANGELOG.md') + readme = ::File.join(file.split('/')[0...-1].join('/'), 'README.md') + publish = true + updated_at = nil + unless file.match(/test_code/) pp = PolicyParser.new pp.parse(file) @@ -26,30 +35,31 @@ task :generate_policy_list do provider = pp.parsed_info[:provider] service = pp.parsed_info[:service] policy_set = pp.parsed_info[:policy_set] + recommendation_type = pp.parsed_info[:recommendation_type] publish = pp.parsed_info[:publish] - # not all templates have the publish key - # set these to true, - if ( publish.nil? || publish=='true' || publish==true ) && provider!="Flexera Cloud Management" - publish = true - else - publish = false - end + + # Set publish to false unless publish is missing or set to true in policy metadata + publish = false unless publish.nil? || publish == 'true' || publish == true end - # get version from long description + # Get version from long description if version.nil? && pp.parsed_long_description =~ /Version/ version = pp.parsed_long_description.split(':').last.strip.chomp("\"") end - # skip policy if the version isn't supplied or if version is '0.0' - if ! version || version == '0.0' || ! publish - puts "Skipping #{pp.parsed_name}, policy not published" + # Skip policy if the version isn't supplied or if version is '0.0' + if !version || version == '0.0' || !publish + puts "Skipping #{pp.parsed_name} because publish flag set to a value other than 'true'" next end + # Get datetime for last time file was modified + commits = github_client.commits(repo_name, branch, path: file) + updated_at = commits.first.commit.author.date.utc.iso8601 unless commits.empty? + puts "Adding #{pp.parsed_name}" - file_list<<{ + file_list << { "name": pp.parsed_name, "file_name": file, "version": version, @@ -61,14 +71,21 @@ task :generate_policy_list do "provider": provider, "service": service, "policy_set": policy_set, + "recommendation_type": recommendation_type, + "updated_at": updated_at } end end + # Sort the file list by Policy Template Name # This minimizes output diffs between runs file_list = file_list.sort_by { |pt| pt[:name] } + # Construct final object - policies = {"policies": file_list } + policies = { "policies": file_list } + # Write the output JSON file to disk - File.open('dist/active-policy-list.json', 'w') { |file| file.write(JSON.pretty_generate(policies)+"\n") } + File.open('dist/active-policy-list.json', 'w') { + |file| file.write(JSON.pretty_generate(policies) + "\n") + } end diff --git a/automation/google/google_rbd_from_label/CHANGELOG.md b/automation/google/google_rbd_from_label/CHANGELOG.md index 0c11b8a5d0..12f9958dcf 100644 --- a/automation/google/google_rbd_from_label/CHANGELOG.md +++ b/automation/google/google_rbd_from_label/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.2 + +- fixed link to README in policy description + ## v1.1 - added ability to specify names for the newly created dimensions diff --git a/automation/google/google_rbd_from_label/google_rbd_from_label.pt b/automation/google/google_rbd_from_label/google_rbd_from_label.pt index 55fbfda904..1b5a4f753d 100644 --- a/automation/google/google_rbd_from_label/google_rbd_from_label.pt +++ b/automation/google/google_rbd_from_label/google_rbd_from_label.pt @@ -1,13 +1,13 @@ name "Google Rule-Based Dimension From Project Labels" rs_pt_ver 20180301 type "policy" -short_description "Creates and/or updates individual Rule-Based Dimensions based on Google Project labels. See the [README](https://github.com/flexera-public/policy_templates/tree/master/automation/azure/azure_rbd_from_tag) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Creates and/or updates individual Rule-Based Dimensions based on Google Project labels. See the [README](https://github.com/flexera-public/policy_templates/tree/master/automation/google/google_rbd_from_label) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "daily" info( - version: "1.0", + version: "1.2", provider: "Flexera", service: "Optima", policy_set: "Automation", diff --git a/compliance/tags/azure_rg_tags/CHANGELOG.md b/compliance/azure/azure_rg_tags/CHANGELOG.md similarity index 94% rename from compliance/tags/azure_rg_tags/CHANGELOG.md rename to compliance/azure/azure_rg_tags/CHANGELOG.md index b47d9e928b..b716a9614f 100644 --- a/compliance/tags/azure_rg_tags/CHANGELOG.md +++ b/compliance/azure/azure_rg_tags/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.7 + +- fixed link to README in policy description + ## v2.6 - Replaced the term **whitelist** with **allowed list**. diff --git a/compliance/tags/azure_rg_tags/README.md b/compliance/azure/azure_rg_tags/README.md similarity index 100% rename from compliance/tags/azure_rg_tags/README.md rename to compliance/azure/azure_rg_tags/README.md diff --git a/compliance/tags/azure_rg_tags/azure_resource_group_tags.pt b/compliance/azure/azure_rg_tags/azure_resource_group_tags.pt similarity index 98% rename from compliance/tags/azure_rg_tags/azure_resource_group_tags.pt rename to compliance/azure/azure_rg_tags/azure_resource_group_tags.pt index b4756655a4..839f8a767b 100644 --- a/compliance/tags/azure_rg_tags/azure_resource_group_tags.pt +++ b/compliance/azure/azure_rg_tags/azure_resource_group_tags.pt @@ -1,13 +1,13 @@ name "Azure Tag Resources with Resource Group Name" rs_pt_ver 20180301 type "policy" -short_description "Scan all resources in an Azure Subscription, raise an incident if any resources are not tagged with the name of their Resource Group, and remediate by tagging the resource. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/tags/azure_rg_tags) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Scan all resources in an Azure Subscription, raise an incident if any resources are not tagged with the name of their Resource Group, and remediate by tagging the resource. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/azure/azure_rg_tags) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "daily" info( - version: "2.6", + version: "2.7", provider: "Azure", service: "", policy_set: "" diff --git a/compliance/billing_center_access_report/README.md b/compliance/billing_center_access_report/README.md deleted file mode 100644 index 8cde2fddb6..0000000000 --- a/compliance/billing_center_access_report/README.md +++ /dev/null @@ -1,31 +0,0 @@ -# Billing Center Access Report - -This Policy Template can target either all Billing Centers in an Organization or target a specific Billing Center. Child Billing Centers are supported as well. The resulting incident is a report of all users that have access to the target Billing Center(s). If RightScale Groups have been granted access to a Billing Center, the report will indicate which Group has delegated access to a particular user. - -## Prerequisites - -This Policy Template uses [Credentials](https://docs.flexera.com/flexera/EN/Automation/ManagingCredentialsExternal.htm) for authenticating to datasources -- in order to apply this policy you must have a Credential registered in the system that is compatible with this policy. If there are no Credentials listed when you apply the policy, please contact your Flexera Org Admin and ask them to register a Credential that is compatible with this policy. The information below should be consulted when creating the credential(s). - -- [**Flexera Credential**](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) (*provider=flexera*) which has the following roles: - - `billing_center_viewer` or `billing_center_admin` - - `enterprise_manager` - -The [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) page in the docs has detailed instructions for setting up Credentials for the most common providers. - -## Input Parameters - -This policy has the following input parameters required when launching the policy. - -- *All Billing Centers?* - report on all Billing centers, true or false. -- *Billing Center Name* - If not reporting on all Billing Centers, provide the name of a specific Billing Center -- *Email addresses of the recipients you wish to notify* - A list of email addresses to notify - -## Policy Actions - -The following policy actions are taken on any resources found to be out of compliance. - -- Send an email report - -### Cost - -This Policy Template does not launch any instances, and so does not incur any cloud costs. diff --git a/compliance/billing_center_access_report/bc_access_report.pt b/compliance/billing_center_access_report/bc_access_report.pt deleted file mode 100644 index d0a97c3ee3..0000000000 --- a/compliance/billing_center_access_report/bc_access_report.pt +++ /dev/null @@ -1,265 +0,0 @@ -name "Billing Center Access Report" -rs_pt_ver 20180301 -type "policy" -short_description "This policy generates an access report by Billing Center. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/billing_center_access_report/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." -long_description "" -severity "low" -category "Compliance" -tenancy "single" -default_frequency "daily" -info( - version: "2.0", - provider: "Flexera Optima", - service: "", - policy_set: "" -) - -parameter "param_email" do - label "Email addresses of the recipients you wish to notify" - type "list" -end - -parameter "param_all_bcs" do - label "All Billing Centers?" - type "string" - allowed_values "true","false" - default "true" -end - -parameter "param_bc" do - label "Billing Center Name" - description "If not reporting on all Billing Centers, provide the name of a specific Billing Center" - type "string" -end - -credentials "auth_flexera" do - schemes "oauth2" - label "flexera" - description "Select Flexera One OAuth2 credentials" - tags "provider=flexera" -end - -datasource "billing_centers" do - request do - auth $auth_flexera - host rs_optima_host - path join(["/analytics/orgs/",rs_org_id,"/billing_centers"]) - header "Api-Version", "1.0" - header "User-Agent", "RS Policies" - query "view", "allocation_table" - end - result do - encoding "json" - collect jmes_path(response,"[*]") do - field "href", jmes_path(col_item,"href") - field "id", jmes_path(col_item,"id") - field "name", jmes_path(col_item,"name") - field "parent_id", jmes_path(col_item,"parent_id") - field "ancestor_ids", jmes_path(col_item,"ancestor_ids") - field "allocation_table", jmes_path(col_item,"allocation_table") - end - end -end - -datasource "real_billing_centers" do - run_script $remove_unallocated_bcs, $billing_centers -end - -script "remove_unallocated_bcs", type: "javascript" do - parameters "billing_centers" - result "filtered_billing_centers" - code <<-EOS - var filtered_billing_centers = - _.reject(billing_centers, function(bc){ return bc.name === "Unallocated" }); -EOS -end - -datasource "bc_users" do - iterate $real_billing_centers - request do - auth $auth_flexera - host rs_optima_host - path join(["/analytics/orgs/",rs_org_id,"/billing_centers/",val(iter_item, "id"),"/access_rules/report"]) - header "Api-Version", "1.0" - header "User-Agent", "RS Policies" - end - result do - encoding "json" - collect jmes_path(response,"[*]") do - field "bc_id", val(iter_item, "id") - field "bc_href", val(iter_item, "href") - field "bc_name", val(iter_item, "name") - field "inherited", jmes_path(col_item,"access_rules[0].inherited") - field "user_href", jmes_path(col_item,"subject.href") - field "user_email", jmes_path(col_item,"subject.email") - field "user_name", jmes_path(col_item,"subject.name") - end - end -end - -datasource "filtered_bcs" do - run_script $filter_bcs, $bc_users, $param_all_bcs, $param_bc -end - -script "filter_bcs", type: "javascript" do - parameters "bc_users","param_all_bcs","param_bc" - result "filtered_bc_users" - code <<-EOS - if (param_all_bcs == "true") { - var filtered_bc_users = bc_users; - } else { - var filtered_bc_users = - _.reject(bc_users, function(bcu){ return bcu.bc_name != param_bc }); - } -EOS -end - -datasource "id_groups" do - run_script $identify_groups, $filtered_bcs -end - -script "identify_groups", type: "javascript" do - parameters "bcs" - result "groups" - code <<-EOS - var groups = []; - // Iterate thru all users & groups - _.each(bcs, function(bc){ - if (bc.user_href.match(/(groups)/g)){ - groups.push({ - bc_id: bc["bc_id"], - bc_href: bc["bc_href"], - bc_name: bc["bc_name"], - inherited: bc["inherited"], - group_name: bc["user_name"], - group_href: bc["user_href"] - }) - } - }) -EOS -end - -datasource "users_in_groups" do - iterate $id_groups - request do - auth $auth_flexera - host "governance.rightscale.com" - path val(iter_item, "group_href") - header "X-Api-Version", "2.0" - header "User-Agent", "RS Policies" - query "view", "extended" - end - result do - encoding "json" - collect jmes_path(response,"users[*]") do - field "bc_id", val(iter_item, "bc_id") - field "bc_href", val(iter_item, "bc_href") - field "bc_name", val(iter_item, "bc_name") - field "inherited", val(iter_item, "inherited") - field "user_href", jmes_path(col_item,"href") - field "user_email", jmes_path(col_item,"email") - field "first_name", jmes_path(col_item,"first_name") - field "last_name", jmes_path(col_item,"last_name") - field "group_name", val(iter_item, "group_name") - field "group_href", val(iter_item, "group_href") - end - end -end - -datasource "final_users" do - run_script $format_users, $users_in_groups, $filtered_bcs, $real_billing_centers -end - -script "format_users", type: "javascript" do - parameters "group_users", "all_users","billing_centers" - result "users" - code <<-EOS - var users = []; - // Remove Groups from Report - var orig_users = - _.reject(all_users, function(user){ return user.user_href.match(/(groups)/g)}); - - _.each(billing_centers, function(bc){ - var billing_center_name = bc.name - - _.each(orig_users, function(user){ - if (user.bc_name == billing_center_name){ - users.push({ - bc_id: user["bc_id"], - bc_href: user["bc_href"], - bc_name: user["bc_name"], - inherited: user["inherited"], - group_name: " ", - group_href: " ", - user_href: user["user_href"], - user_email: user["user_email"], - user_name: user["user_name"] - }) - } - }) - - _.each(group_users, function(user){ - if (user.bc_name == billing_center_name){ - users.push({ - bc_id: user["bc_id"], - bc_href: user["bc_href"], - bc_name: user["bc_name"], - inherited: user["inherited"], - group_name: user["group_name"], - group_href: user["group_href"], - user_href: user["user_href"], - user_email: user["user_email"], - user_name: user["first_name"] + " " + user["last_name"] - }) - } - }) - }) - users=_.sortBy(users, 'bc_name'); - users=_.sortBy(users, 'user_name'); - users=_.sortBy(users, 'user_email'); - -EOS -end - -escalation "report_bc_users" do - automatic true - label "Send Email" - description "Send incident email" - email $param_email -end - -policy "access_report_by_bc" do - validate_each $final_users do - summary_template "Billing Center Access Report" - escalate $report_bc_users - check eq(val(item, "inherited"), "force_incident_flag") - export do - resource_level true - field "bc_name" do - label "Billing Center Name" - end - field "user_name" do - label "User Name" - end - field "user_email" do - label "Email" - end - field "user_href" do - label "User href" - end - field "inherited" do - label "Inherited?" - end - field "group_name" do - label "Group Name" - end - field "group_href" do - label "Group Href" - end - field "id" do - label "Id" - path "bc_id" - end - end - end -end diff --git a/compliance/policy_update_notification/CHANGELOG.md b/compliance/flexera/automation/policy_update_notification/CHANGELOG.md similarity index 90% rename from compliance/policy_update_notification/CHANGELOG.md rename to compliance/flexera/automation/policy_update_notification/CHANGELOG.md index 15da8aba2f..4c1fe88099 100644 --- a/compliance/policy_update_notification/CHANGELOG.md +++ b/compliance/flexera/automation/policy_update_notification/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v2.1 - Deprecated: This policy is no longer being updated. Please see policy README for more information. diff --git a/compliance/policy_update_notification/README.md b/compliance/flexera/automation/policy_update_notification/README.md similarity index 100% rename from compliance/policy_update_notification/README.md rename to compliance/flexera/automation/policy_update_notification/README.md diff --git a/compliance/policy_update_notification/policy_update_notification.pt b/compliance/flexera/automation/policy_update_notification/policy_update_notification.pt similarity index 93% rename from compliance/policy_update_notification/policy_update_notification.pt rename to compliance/flexera/automation/policy_update_notification/policy_update_notification.pt index 8c435c6457..59d32069a3 100644 --- a/compliance/policy_update_notification/policy_update_notification.pt +++ b/compliance/flexera/automation/policy_update_notification/policy_update_notification.pt @@ -1,16 +1,17 @@ name "Policy Update Notification" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated. Please see [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/policy_update_notification/) for more details.** Checks for applied policies that use outdated policy catalog templates. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/policy_update_notification/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated. Please see [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/automation/policy_update_notification/) for more details.** Checks for applied policies that use outdated policy catalog templates. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/automation/policy_update_notification/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Compliance" default_frequency "weekly" info( - version: "2.1", + version: "2.2", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################## diff --git a/compliance/billing_center_access_report/CHANGELOG.md b/compliance/flexera/cco/billing_center_access_report/CHANGELOG.md similarity index 80% rename from compliance/billing_center_access_report/CHANGELOG.md rename to compliance/flexera/cco/billing_center_access_report/CHANGELOG.md index d0131d22f0..1356c8093b 100644 --- a/compliance/billing_center_access_report/CHANGELOG.md +++ b/compliance/flexera/cco/billing_center_access_report/CHANGELOG.md @@ -1,5 +1,11 @@ # Changelog +## v3.0 + +- Billing Center filter condensed to a single parameter and now supports both names and IDs +- Incident summary is now derived from the name of the applied policy +- Streamlined code for better readability and faster execution + ## v2.0 - Deprecated `auth_rs` authentication (type: `rightscale`) and replaced with `auth_flexera` (type: `oauth2`). This is a breaking change which requires a Credential for `auth_flexera` [`provider=flexera`] before the policy can be applied. Please see docs for setting up [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) diff --git a/compliance/flexera/cco/billing_center_access_report/README.md b/compliance/flexera/cco/billing_center_access_report/README.md new file mode 100644 index 0000000000..e89854d7e4 --- /dev/null +++ b/compliance/flexera/cco/billing_center_access_report/README.md @@ -0,0 +1,34 @@ +# Billing Center Access Report + +## What It Does + +This Policy Template produces a report of all users that have access to the target Billing Center(s), including whether or not they have that access by virtue of group membership. If the user does not specify any Billing Centers, the report is produced for all Billing Centers. + +## Input Parameters + +- *Email Addresses* - Email addresses of the recipients you wish to notify when new incidents are created. +- *Billing Centers* - List of Billing Center names/IDs to report on. Leave empty to report on all Billing Centers. + +## Policy Actions + +- Sends an email notification + +## Prerequisites + +This Policy Template uses [Credentials](https://docs.flexera.com/flexera/EN/Automation/ManagingCredentialsExternal.htm) for authenticating to datasources -- in order to apply this policy you must have a Credential registered in the system that is compatible with this policy. If there are no Credentials listed when you apply the policy, please contact your Flexera Org Admin and ask them to register a Credential that is compatible with this policy. The information below should be consulted when creating the credential(s). + +### Credential configuration + +- [**Flexera Credential**](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) (*provider=flexera*) which has the following roles: + - `billing_center_viewer` + - `enterprise_manager` + +The [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) page in the docs has detailed instructions for setting up Credentials for the most common providers. + +## Supported Clouds + +- Flexera + +## Cost + +This Policy Template does not incur any cloud costs. diff --git a/compliance/flexera/cco/billing_center_access_report/bc_access_report.pt b/compliance/flexera/cco/billing_center_access_report/bc_access_report.pt new file mode 100644 index 0000000000..45e4626ea7 --- /dev/null +++ b/compliance/flexera/cco/billing_center_access_report/bc_access_report.pt @@ -0,0 +1,302 @@ +name "Billing Center Access Report" +rs_pt_ver 20180301 +type "policy" +short_description "This policy generates an access report by Billing Center. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/cco/billing_center_access_report/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +long_description "" +category "Compliance" +severity "low" +default_frequency "daily" +info( + version: "3.0", + provider: "Flexera", + service: "CCO", + policy_set: "" +) + +############################################################################### +# Parameters +############################################################################### + +parameter "param_email" do + type "list" + category "Policy Settings" + label "Email Addresses" + description "Email addresses of the recipients you wish to notify when new incidents are created" + default [] +end + +parameter "param_billing_centers" do + type "list" + category "Filters" + label "Billing Centers" + description "List of Billing Center names/IDs to report on. Leave empty to report on all Billing Centers." + default [] +end + +############################################################################### +# Authentication +############################################################################### + +credentials "auth_flexera" do + schemes "oauth2" + label "Flexera" + description "Select Flexera One OAuth2 credentials" + tags "provider=flexera" +end + +############################################################################### +# Datasources & Scripts +############################################################################### + +# Get applied policy metadata for use later +datasource "ds_applied_policy" do + request do + auth $auth_flexera + host rs_governance_host + path join(["/api/governance/projects/", rs_project_id, "/applied_policies/", policy_id]) + header "Api-Version", "1.0" + end +end + +datasource "ds_billing_centers" do + request do + auth $auth_flexera + host rs_optima_host + path join(["/analytics/orgs/", rs_org_id, "/billing_centers"]) + query "view", "allocation_table" + header "Api-Version", "1.0" + header "User-Agent", "RS Policies" + end + result do + encoding "json" + collect jmes_path(response, "[*]") do + field "href", jmes_path(col_item, "href") + field "id", jmes_path(col_item, "id") + field "name", jmes_path(col_item, "name") + field "parent_id", jmes_path(col_item, "parent_id") + field "ancestor_ids", jmes_path(col_item, "ancestor_ids") + field "allocation_table", jmes_path(col_item, "allocation_table") + end + end +end + +datasource "ds_billing_centers_filtered" do + run_script $js_billing_centers_filtered, $ds_billing_centers, $param_billing_centers +end + +script "js_billing_centers_filtered", type: "javascript" do + parameters "ds_billing_centers", "param_billing_centers" + result "result" + code <<-EOS + if (param_billing_centers.length > 0) { + result = _.filter(ds_billing_centers, function(bc) { + return _.contains(param_billing_centers, bc['id']) || _.contains(param_billing_centers, bc['name']) + }) + } else { + result = _.filter(ds_billing_centers, function(bc) { return bc['name'] != "Unallocated" }) + } +EOS +end + +datasource "ds_billing_center_users" do + iterate $ds_billing_centers_filtered + request do + auth $auth_flexera + host rs_optima_host + path join(["/analytics/orgs/", rs_org_id, "/billing_centers/", val(iter_item, "id"), "/access_rules/report"]) + header "Api-Version", "1.0" + header "User-Agent", "RS Policies" + end + result do + encoding "json" + collect jmes_path(response,"[*]") do + field "bc_id", val(iter_item, "id") + field "bc_href", val(iter_item, "href") + field "bc_name", val(iter_item, "name") + field "inherited", jmes_path(col_item, "access_rules[0].inherited") + field "user_href", jmes_path(col_item, "subject.href") + field "user_email", jmes_path(col_item, "subject.email") + field "user_name", jmes_path(col_item, "subject.name") + end + end +end + +datasource "ds_id_groups" do + run_script $js_id_groups, $ds_billing_center_users +end + +script "js_id_groups", type: "javascript" do + parameters "ds_billing_center_users" + result "result" + code <<-EOS + groups = _.filter(ds_billing_center_users, function(bc) { return bc['user_href'].match(/(groups)/g) }) + + result = _.map(groups, function(item) { + return { + bc_id: item["bc_id"], + bc_href: item["bc_href"], + bc_name: item["bc_name"], + inherited: item["inherited"], + group_name: item["user_name"], + group_href: item["user_href"] + } + }) +EOS +end + +datasource "ds_users_in_groups" do + iterate $ds_id_groups + request do + auth $auth_flexera + host "governance.rightscale.com" + path val(iter_item, "group_href") + query "view", "extended" + header "X-Api-Version", "2.0" + header "User-Agent", "RS Policies" + end + result do + encoding "json" + collect jmes_path(response,"users[*]") do + field "user_href", jmes_path(col_item, "href") + field "user_email", jmes_path(col_item, "email") + field "first_name", jmes_path(col_item, "first_name") + field "last_name", jmes_path(col_item, "last_name") + field "bc_id", val(iter_item, "bc_id") + field "bc_href", val(iter_item, "bc_href") + field "bc_name", val(iter_item, "bc_name") + field "inherited", val(iter_item, "inherited") + field "group_name", val(iter_item, "group_name") + field "group_href", val(iter_item, "group_href") + end + end +end + +datasource "ds_incident" do + run_script $js_incident, $ds_users_in_groups, $ds_billing_center_users, $ds_billing_centers_filtered, $ds_applied_policy +end + +script "js_incident", type: "javascript" do + parameters "ds_users_in_groups", "ds_billing_center_users", "ds_billing_centers_filtered", "ds_applied_policy" + result "result" + code <<-EOS + result = [] + + // Remove Groups from Report + orig_users = _.reject(ds_billing_center_users, function(user) { + return user['user_href'].match(/(groups)/g) + }) + + // Store users in objects for fast retrieval to avoid nested looping + orig_users_object = {} + + _.each(orig_users, function(item) { + if (orig_users_object[item['bc_name']] == undefined) { + orig_users_object[item['bc_name']] = [] + } + + orig_users_object[item['bc_name']].push(item) + }) + + users_in_groups_object = {} + + _.each(ds_users_in_groups, function(item) { + if (users_in_groups_object[item['bc_name']] == undefined) { + users_in_groups_object[item['bc_name']] = [] + } + + users_in_groups_object[item['bc_name']].push(item) + }) + + // Produce final list + _.each(ds_billing_centers_filtered, function(bc) { + if (orig_users_object[bc['name']] != undefined) { + result = result.concat(_.map(orig_users_object[bc['name']], function(user) { + return { + bc_id: user["bc_id"], + bc_href: user["bc_href"], + bc_name: user["bc_name"], + inherited: user["inherited"], + group_name: "", + group_href: "", + user_href: user["user_href"], + user_email: user["user_email"], + user_name: user["user_name"], + policy_name: ds_applied_policy["name"] + } + })) + } + + if (users_in_groups_object[bc['name']] != undefined) { + result = result.concat(_.map(users_in_groups_object[bc['name']], function(user) { + return { + bc_id: user["bc_id"], + bc_href: user["bc_href"], + bc_name: user["bc_name"], + inherited: user["inherited"], + group_name: user["group_name"], + group_href: user["group_href"], + user_href: user["user_href"], + user_email: user["user_email"], + user_name: user["first_name"] + " " + user["last_name"], + policy_name: ds_applied_policy["name"] + } + })) + } + }) + + result = _.sortBy(result, "bc_name") + result = _.sortBy(result, "user_name") + result = _.sortBy(result, "user_email") +EOS +end + +############################################################################### +# Policy +############################################################################### + +policy "pol_access_report_by_bc" do + validate_each $ds_incident do + summary_template "{{ with index data 0 }}{{ .policy_name }}{{ end }}" + check eq(val(item, "inherited"), "force_incident_flag") + escalate $esc_email + export do + resource_level true + field "bc_name" do + label "Billing Center Name" + end + field "user_name" do + label "User Name" + end + field "user_email" do + label "User Email" + end + field "user_href" do + label "User HREF" + end + field "group_name" do + label "Group Name" + end + field "group_href" do + label "Group HREF" + end + field "inherited" do + label "Inherited?" + end + field "id" do + label "Id" + path "bc_id" + end + end + end +end + +############################################################################### +# Escalations +############################################################################### + +escalation "esc_email" do + automatic true + label "Send Email" + description "Send incident email" + email $param_email +end diff --git a/operational/stranded_servers/CHANGELOG.md b/compliance/flexera/cmp/disallowed_images/CHANGELOG.md similarity index 82% rename from operational/stranded_servers/CHANGELOG.md rename to compliance/flexera/cmp/disallowed_images/CHANGELOG.md index 32e8cd3649..48293fa4fc 100644 --- a/operational/stranded_servers/CHANGELOG.md +++ b/compliance/flexera/cmp/disallowed_images/CHANGELOG.md @@ -2,27 +2,27 @@ ## v1.6 -- Deprecated: This policy is no longer being updated. +- Updated policy metadata to ensure that it does not publish to the catalog ## v1.5 -- updated README.md rightscale documentation links with docs.flexera documentation links +- Deprecated: This policy is no longer being updated. ## v1.4 -- Modified escalation label and description for consistency +- updated README.md rightscale documentation links with docs.flexera documentation links ## v1.3 -- Adding incident resource table +- Modified escalation label and description for consistency ## v1.2 -- Updated the metadata +- Adding incident resource table ## v1.1 -- Added Permission block +- Updated the metadata ## v1.0 diff --git a/compliance/disallowed_images/README.md b/compliance/flexera/cmp/disallowed_images/README.md similarity index 100% rename from compliance/disallowed_images/README.md rename to compliance/flexera/cmp/disallowed_images/README.md diff --git a/compliance/disallowed_images/disallowed_cloud_images.pt b/compliance/flexera/cmp/disallowed_images/disallowed_cloud_images.pt similarity index 96% rename from compliance/disallowed_images/disallowed_cloud_images.pt rename to compliance/flexera/cmp/disallowed_images/disallowed_cloud_images.pt index 765fe1d8bb..6534dc60d7 100644 --- a/compliance/disallowed_images/disallowed_cloud_images.pt +++ b/compliance/flexera/cmp/disallowed_images/disallowed_cloud_images.pt @@ -1,15 +1,16 @@ name "Disallowed Cloud Images" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Checks for any running instances that are using disallowed cloud images with the option to Terminate them after approval. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/disallowed_images) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Checks for any running instances that are using disallowed cloud images with the option to Terminate them after approval. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/cmp/disallowed_images) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Compliance" severity "low" info( - version: "1.5", + version: "1.6", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/compliance/tags/tag_checker/CHANGELOG.md b/compliance/flexera/cmp/tag_checker/CHANGELOG.md similarity index 91% rename from compliance/tags/tag_checker/CHANGELOG.md rename to compliance/flexera/cmp/tag_checker/CHANGELOG.md index 13ac47d742..6d16eace9f 100644 --- a/compliance/tags/tag_checker/CHANGELOG.md +++ b/compliance/flexera/cmp/tag_checker/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.16 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.15 - Deprecated: This policy is no longer being updated. diff --git a/compliance/tags/tag_checker/README.md b/compliance/flexera/cmp/tag_checker/README.md similarity index 100% rename from compliance/tags/tag_checker/README.md rename to compliance/flexera/cmp/tag_checker/README.md diff --git a/compliance/tags/tag_checker/tag_checker.pt b/compliance/flexera/cmp/tag_checker/tag_checker.pt similarity index 98% rename from compliance/tags/tag_checker/tag_checker.pt rename to compliance/flexera/cmp/tag_checker/tag_checker.pt index c043c7accf..80f644c923 100644 --- a/compliance/tags/tag_checker/tag_checker.pt +++ b/compliance/flexera/cmp/tag_checker/tag_checker.pt @@ -1,15 +1,16 @@ name "Untagged Resources" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Check resources for missing tags and report on them. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/tags/tag_checker) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Check resources for missing tags and report on them. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/cmp/tag_checker) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Compliance" severity "medium" info( - version: "1.15", + version: "1.16", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "retrieve_resources" do diff --git a/compliance/unapproved_instance_types/CHANGELOG.md b/compliance/flexera/cmp/unapproved_instance_types/CHANGELOG.md similarity index 84% rename from compliance/unapproved_instance_types/CHANGELOG.md rename to compliance/flexera/cmp/unapproved_instance_types/CHANGELOG.md index bf3c0611c8..57ce803665 100644 --- a/compliance/unapproved_instance_types/CHANGELOG.md +++ b/compliance/flexera/cmp/unapproved_instance_types/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.8 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.7 - Deprecated: This policy is no longer being updated. diff --git a/compliance/unapproved_instance_types/README.md b/compliance/flexera/cmp/unapproved_instance_types/README.md similarity index 100% rename from compliance/unapproved_instance_types/README.md rename to compliance/flexera/cmp/unapproved_instance_types/README.md diff --git a/compliance/unapproved_instance_types/unapproved_instance_types.pt b/compliance/flexera/cmp/unapproved_instance_types/unapproved_instance_types.pt similarity index 96% rename from compliance/unapproved_instance_types/unapproved_instance_types.pt rename to compliance/flexera/cmp/unapproved_instance_types/unapproved_instance_types.pt index c3da09ee74..dd975f659f 100644 --- a/compliance/unapproved_instance_types/unapproved_instance_types.pt +++ b/compliance/flexera/cmp/unapproved_instance_types/unapproved_instance_types.pt @@ -1,15 +1,16 @@ name "Unapproved Instance Types" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Checks for instances that are using instance types that are not in the specified list and stops them after approval. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/unapproved_instance_types) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Checks for instances that are using instance types that are not in the specified list and stops them after approval. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/cmp/unapproved_instance_types) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Compliance" severity "medium" info( - version: "1.7", + version: "1.8", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/compliance/fnms/fnms_licenses_at_risk/CHANGELOG.md b/compliance/flexera/fnms/fnms_licenses_at_risk/CHANGELOG.md similarity index 89% rename from compliance/fnms/fnms_licenses_at_risk/CHANGELOG.md rename to compliance/flexera/fnms/fnms_licenses_at_risk/CHANGELOG.md index 41fb61df8e..b0764d5b6e 100644 --- a/compliance/fnms/fnms_licenses_at_risk/CHANGELOG.md +++ b/compliance/flexera/fnms/fnms_licenses_at_risk/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.7 + +- Updated description to account for new file path in Github repository + ## v2.6 - Add default_frequency "monthly" diff --git a/compliance/fnms/fnms_licenses_at_risk/README.md b/compliance/flexera/fnms/fnms_licenses_at_risk/README.md similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/README.md rename to compliance/flexera/fnms/fnms_licenses_at_risk/README.md diff --git a/compliance/fnms/fnms_licenses_at_risk/fnms-at-risk-licenses.pt b/compliance/flexera/fnms/fnms_licenses_at_risk/fnms-at-risk-licenses.pt similarity index 94% rename from compliance/fnms/fnms_licenses_at_risk/fnms-at-risk-licenses.pt rename to compliance/flexera/fnms/fnms_licenses_at_risk/fnms-at-risk-licenses.pt index ad80906766..d5dbe58fa8 100644 --- a/compliance/fnms/fnms_licenses_at_risk/fnms-at-risk-licenses.pt +++ b/compliance/flexera/fnms/fnms_licenses_at_risk/fnms-at-risk-licenses.pt @@ -1,13 +1,13 @@ name "FlexNet Manager Licenses At Risk" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Looks up Flexnet Manager Licenses \"At Risk\" and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/fnms_licenses_at_risk) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Looks up Flexnet Manager Licenses \"At Risk\" and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/fnms_licenses_at_risk) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "monthly" info( - version: "2.6", + version: "2.7", provider: "Flexera FNMS", service: "", policy_set: "FlexNet Manager Licenses At Risk", diff --git a/compliance/fnms/fnms_licenses_at_risk/images/APIToken.png b/compliance/flexera/fnms/fnms_licenses_at_risk/images/APIToken.png similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/images/APIToken.png rename to compliance/flexera/fnms/fnms_licenses_at_risk/images/APIToken.png diff --git a/compliance/fnms/fnms_licenses_at_risk/images/CreateServeceAccount.png b/compliance/flexera/fnms/fnms_licenses_at_risk/images/CreateServeceAccount.png similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/images/CreateServeceAccount.png rename to compliance/flexera/fnms/fnms_licenses_at_risk/images/CreateServeceAccount.png diff --git a/compliance/fnms/fnms_licenses_at_risk/images/FNMSCloudInstanceReport.png b/compliance/flexera/fnms/fnms_licenses_at_risk/images/FNMSCloudInstanceReport.png similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/images/FNMSCloudInstanceReport.png rename to compliance/flexera/fnms/fnms_licenses_at_risk/images/FNMSCloudInstanceReport.png diff --git a/compliance/fnms/fnms_licenses_at_risk/images/MailOutput_FNMSLicense.png b/compliance/flexera/fnms/fnms_licenses_at_risk/images/MailOutput_FNMSLicense.png similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/images/MailOutput_FNMSLicense.png rename to compliance/flexera/fnms/fnms_licenses_at_risk/images/MailOutput_FNMSLicense.png diff --git a/compliance/fnms/fnms_licenses_at_risk/images/ReportNumber.png b/compliance/flexera/fnms/fnms_licenses_at_risk/images/ReportNumber.png similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/images/ReportNumber.png rename to compliance/flexera/fnms/fnms_licenses_at_risk/images/ReportNumber.png diff --git a/compliance/fnms/fnms_licenses_at_risk/images/WebServiceRole.png b/compliance/flexera/fnms/fnms_licenses_at_risk/images/WebServiceRole.png similarity index 100% rename from compliance/fnms/fnms_licenses_at_risk/images/WebServiceRole.png rename to compliance/flexera/fnms/fnms_licenses_at_risk/images/WebServiceRole.png diff --git a/compliance/fnms/fnms_licenses_expiring/CHANGELOG.md b/compliance/flexera/fnms/fnms_licenses_expiring/CHANGELOG.md similarity index 77% rename from compliance/fnms/fnms_licenses_expiring/CHANGELOG.md rename to compliance/flexera/fnms/fnms_licenses_expiring/CHANGELOG.md index 5d7fdeba2e..e1b78d341f 100644 --- a/compliance/fnms/fnms_licenses_expiring/CHANGELOG.md +++ b/compliance/flexera/fnms/fnms_licenses_expiring/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Replaced hardcoded `host` in `ds_licenses` using `f1_app_host` as base diff --git a/compliance/fnms/fnms_licenses_expiring/README.md b/compliance/flexera/fnms/fnms_licenses_expiring/README.md similarity index 100% rename from compliance/fnms/fnms_licenses_expiring/README.md rename to compliance/flexera/fnms/fnms_licenses_expiring/README.md diff --git a/compliance/fnms/fnms_licenses_expiring/expiring_licenses.pt b/compliance/flexera/fnms/fnms_licenses_expiring/expiring_licenses.pt similarity index 93% rename from compliance/fnms/fnms_licenses_expiring/expiring_licenses.pt rename to compliance/flexera/fnms/fnms_licenses_expiring/expiring_licenses.pt index 8415108faf..b0f424a54e 100644 --- a/compliance/fnms/fnms_licenses_expiring/expiring_licenses.pt +++ b/compliance/flexera/fnms/fnms_licenses_expiring/expiring_licenses.pt @@ -1,13 +1,13 @@ name "ITAM Expiring Licenses" rs_pt_ver 20180301 type "policy" -short_description "Looks up Active Flexnet Manager Licenses Expiring within set Time Period and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/fnms_licenses_expiring) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Looks up Active Flexnet Manager Licenses Expiring within set Time Period and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/fnms_licenses_expiring) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "weekly" info( - version: "2.2", + version: "2.3", provider: "Flexera ITAM", service: "", policy_set: "ITAM" diff --git a/compliance/fnms/fnms_low_licenses_available/CHANGELOG.md b/compliance/flexera/fnms/fnms_low_licenses_available/CHANGELOG.md similarity index 87% rename from compliance/fnms/fnms_low_licenses_available/CHANGELOG.md rename to compliance/flexera/fnms/fnms_low_licenses_available/CHANGELOG.md index 409895e2ed..424356025e 100644 --- a/compliance/fnms/fnms_low_licenses_available/CHANGELOG.md +++ b/compliance/flexera/fnms/fnms_low_licenses_available/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.6 + +- Updated description to account for new file path in Github repository + ## v2.5 - Add default_frequency "monthly" diff --git a/compliance/fnms/fnms_low_licenses_available/README.md b/compliance/flexera/fnms/fnms_low_licenses_available/README.md similarity index 100% rename from compliance/fnms/fnms_low_licenses_available/README.md rename to compliance/flexera/fnms/fnms_low_licenses_available/README.md diff --git a/compliance/fnms/fnms_low_licenses_available/fnms-low-available-licenses.pt b/compliance/flexera/fnms/fnms_low_licenses_available/fnms-low-available-licenses.pt similarity index 96% rename from compliance/fnms/fnms_low_licenses_available/fnms-low-available-licenses.pt rename to compliance/flexera/fnms/fnms_low_licenses_available/fnms-low-available-licenses.pt index d0c6002121..7295f04e32 100644 --- a/compliance/fnms/fnms_low_licenses_available/fnms-low-available-licenses.pt +++ b/compliance/flexera/fnms/fnms_low_licenses_available/fnms-low-available-licenses.pt @@ -1,13 +1,13 @@ name "FlexNet Manager Low Available Licenses" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Looks up Flexnet Manager Licenses and finds all Flexnet Manager Licenses with available count less than user provide percentage, and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/fnms_low_licenses_available) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Looks up Flexnet Manager Licenses and finds all Flexnet Manager Licenses with available count less than user provide percentage, and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/fnms_low_licenses_available) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "monthly" info( - version: "2.5", + version: "2.6", provider: "Flexera FNMS", service: "", policy_set: "Low License Count", diff --git a/compliance/fnms/fnms_low_licenses_available/images/APIToken.png b/compliance/flexera/fnms/fnms_low_licenses_available/images/APIToken.png similarity index 100% rename from compliance/fnms/fnms_low_licenses_available/images/APIToken.png rename to compliance/flexera/fnms/fnms_low_licenses_available/images/APIToken.png diff --git a/compliance/fnms/fnms_low_licenses_available/images/CreateServeceAccount.png b/compliance/flexera/fnms/fnms_low_licenses_available/images/CreateServeceAccount.png similarity index 100% rename from compliance/fnms/fnms_low_licenses_available/images/CreateServeceAccount.png rename to compliance/flexera/fnms/fnms_low_licenses_available/images/CreateServeceAccount.png diff --git a/compliance/fnms/fnms_low_licenses_available/images/FNMS_cv_Report.png b/compliance/flexera/fnms/fnms_low_licenses_available/images/FNMS_cv_Report.png similarity index 100% rename from compliance/fnms/fnms_low_licenses_available/images/FNMS_cv_Report.png rename to compliance/flexera/fnms/fnms_low_licenses_available/images/FNMS_cv_Report.png diff --git a/compliance/fnms/fnms_low_licenses_available/images/ReportNumber.png b/compliance/flexera/fnms/fnms_low_licenses_available/images/ReportNumber.png similarity index 100% rename from compliance/fnms/fnms_low_licenses_available/images/ReportNumber.png rename to compliance/flexera/fnms/fnms_low_licenses_available/images/ReportNumber.png diff --git a/compliance/fnms/fnms_low_licenses_available/images/WebServiceRole.png b/compliance/flexera/fnms/fnms_low_licenses_available/images/WebServiceRole.png similarity index 100% rename from compliance/fnms/fnms_low_licenses_available/images/WebServiceRole.png rename to compliance/flexera/fnms/fnms_low_licenses_available/images/WebServiceRole.png diff --git a/compliance/fnms/vms_missing_hostid/CHANGELOG.md b/compliance/flexera/fnms/ignored_recent_inventory_dates/CHANGELOG.md similarity index 78% rename from compliance/fnms/vms_missing_hostid/CHANGELOG.md rename to compliance/flexera/fnms/ignored_recent_inventory_dates/CHANGELOG.md index 43c6777254..8b4aaf78a6 100644 --- a/compliance/fnms/vms_missing_hostid/CHANGELOG.md +++ b/compliance/flexera/fnms/ignored_recent_inventory_dates/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Replaced hardcoded `host` in `ds_inventories` using `f1_app_host` as base diff --git a/compliance/fnms/ignored_recent_inventory_dates/README.md b/compliance/flexera/fnms/ignored_recent_inventory_dates/README.md similarity index 100% rename from compliance/fnms/ignored_recent_inventory_dates/README.md rename to compliance/flexera/fnms/ignored_recent_inventory_dates/README.md diff --git a/compliance/fnms/ignored_recent_inventory_dates/ignored_recent_inventory_dates.pt b/compliance/flexera/fnms/ignored_recent_inventory_dates/ignored_recent_inventory_dates.pt similarity index 92% rename from compliance/fnms/ignored_recent_inventory_dates/ignored_recent_inventory_dates.pt rename to compliance/flexera/fnms/ignored_recent_inventory_dates/ignored_recent_inventory_dates.pt index 3b7ed773ed..f743832ced 100644 --- a/compliance/fnms/ignored_recent_inventory_dates/ignored_recent_inventory_dates.pt +++ b/compliance/flexera/fnms/ignored_recent_inventory_dates/ignored_recent_inventory_dates.pt @@ -1,14 +1,14 @@ name "ITAM Ignored Recent Inventory Dates" rs_pt_ver 20180301 type "policy" -short_description "Looks for machines that are ignored but have been invenotry recently and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/ignored_recent_inventory_dates/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Looks for machines that are ignored but have been invenotry recently and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/ignored_recent_inventory_dates/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "weekly" info( - version: "2.2", + version: "2.3", provider: "Flexera ITAM", service: "", policy_set: "ITAM" diff --git a/compliance/fnms/ignored_recent_inventory_dates/CHANGELOG.md b/compliance/flexera/fnms/missing_active_machines/CHANGELOG.md similarity index 78% rename from compliance/fnms/ignored_recent_inventory_dates/CHANGELOG.md rename to compliance/flexera/fnms/missing_active_machines/CHANGELOG.md index 43c6777254..8b4aaf78a6 100644 --- a/compliance/fnms/ignored_recent_inventory_dates/CHANGELOG.md +++ b/compliance/flexera/fnms/missing_active_machines/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Replaced hardcoded `host` in `ds_inventories` using `f1_app_host` as base diff --git a/compliance/fnms/missing_active_machines/README.md b/compliance/flexera/fnms/missing_active_machines/README.md similarity index 100% rename from compliance/fnms/missing_active_machines/README.md rename to compliance/flexera/fnms/missing_active_machines/README.md diff --git a/compliance/fnms/missing_active_machines/missing_active_machines.pt b/compliance/flexera/fnms/missing_active_machines/missing_active_machines.pt similarity index 94% rename from compliance/fnms/missing_active_machines/missing_active_machines.pt rename to compliance/flexera/fnms/missing_active_machines/missing_active_machines.pt index 30169121c0..3673797d21 100644 --- a/compliance/fnms/missing_active_machines/missing_active_machines.pt +++ b/compliance/flexera/fnms/missing_active_machines/missing_active_machines.pt @@ -1,14 +1,14 @@ name "ITAM Missing Active Machines" rs_pt_ver 20180301 type "policy" -short_description "Looks for machines that are active but haven't checked in and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/missing_active_machines/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Looks for machines that are active but haven't checked in and sends the result as an email. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/missing_active_machines/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "weekly" info( - version: "2.2", + version: "2.3", provider: "Flexera ITAM", service: "", policy_set: "ITAM" diff --git a/compliance/fnms/overused_licenses/CHANGELOG.md b/compliance/flexera/fnms/overused_licenses/CHANGELOG.md similarity index 80% rename from compliance/fnms/overused_licenses/CHANGELOG.md rename to compliance/flexera/fnms/overused_licenses/CHANGELOG.md index f9e4d4dd93..db87184a13 100644 --- a/compliance/fnms/overused_licenses/CHANGELOG.md +++ b/compliance/flexera/fnms/overused_licenses/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Replaced hardcoded `host` in `ds_license_attributes` and `ds_license_entitlements` using `f1_app_host` as base diff --git a/compliance/fnms/overused_licenses/README.md b/compliance/flexera/fnms/overused_licenses/README.md similarity index 100% rename from compliance/fnms/overused_licenses/README.md rename to compliance/flexera/fnms/overused_licenses/README.md diff --git a/compliance/fnms/overused_licenses/overused_licenses.pt b/compliance/flexera/fnms/overused_licenses/overused_licenses.pt similarity index 95% rename from compliance/fnms/overused_licenses/overused_licenses.pt rename to compliance/flexera/fnms/overused_licenses/overused_licenses.pt index 6ad00d5bd7..583e616f5c 100644 --- a/compliance/fnms/overused_licenses/overused_licenses.pt +++ b/compliance/flexera/fnms/overused_licenses/overused_licenses.pt @@ -1,13 +1,13 @@ name "ITAM Overused Licenses" rs_pt_ver 20180301 type "policy" -short_description "Looks up software licenses and reports in email any licenses that are overused. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/overused_licenses) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Looks up software licenses and reports in email any licenses that are overused. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/overused_licenses) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "daily" info( - version: "2.2", + version: "2.3", provider: "Flexera FNMS", service: "", policy_set: "" diff --git a/compliance/fnms/missing_active_machines/CHANGELOG.md b/compliance/flexera/fnms/vms_missing_hostid/CHANGELOG.md similarity index 78% rename from compliance/fnms/missing_active_machines/CHANGELOG.md rename to compliance/flexera/fnms/vms_missing_hostid/CHANGELOG.md index 43c6777254..8b4aaf78a6 100644 --- a/compliance/fnms/missing_active_machines/CHANGELOG.md +++ b/compliance/flexera/fnms/vms_missing_hostid/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Replaced hardcoded `host` in `ds_inventories` using `f1_app_host` as base diff --git a/compliance/fnms/vms_missing_hostid/README.md b/compliance/flexera/fnms/vms_missing_hostid/README.md similarity index 100% rename from compliance/fnms/vms_missing_hostid/README.md rename to compliance/flexera/fnms/vms_missing_hostid/README.md diff --git a/compliance/fnms/vms_missing_hostid/vms_missing_hostid.pt b/compliance/flexera/fnms/vms_missing_hostid/vms_missing_hostid.pt similarity index 94% rename from compliance/fnms/vms_missing_hostid/vms_missing_hostid.pt rename to compliance/flexera/fnms/vms_missing_hostid/vms_missing_hostid.pt index 4effe11562..114605a242 100644 --- a/compliance/fnms/vms_missing_hostid/vms_missing_hostid.pt +++ b/compliance/flexera/fnms/vms_missing_hostid/vms_missing_hostid.pt @@ -1,13 +1,13 @@ name "ITAM VMs Missing Host ID" rs_pt_ver 20180301 type "policy" -short_description "Looks for machines that are active but missing a Host ID. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/fnms/vms_missing_hostid/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Looks for machines that are active but missing a Host ID. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/fnms/vms_missing_hostid/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Compliance" default_frequency "daily" info( - version: "2.2", + version: "2.3", provider: "Flexera ITAM", service: "", policy_set: "ITAM" diff --git a/compliance/flexera/iam_explicit_user_roles/CHANGELOG.md b/compliance/flexera/iam/iam_explicit_user_roles/CHANGELOG.md similarity index 89% rename from compliance/flexera/iam_explicit_user_roles/CHANGELOG.md rename to compliance/flexera/iam/iam_explicit_user_roles/CHANGELOG.md index 125f60f468..fd9dafa395 100644 --- a/compliance/flexera/iam_explicit_user_roles/CHANGELOG.md +++ b/compliance/flexera/iam/iam_explicit_user_roles/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- Updated description to account for new file path in Github repository + ## v3.0 - Deprecated `auth_rs` authentication (type: `rightscale`) and replaced with `auth_flexera` (type: `oauth2`). This is a breaking change which requires a Credential for `auth_flexera` [`provider=flexera`] before the policy can be applied. Please see docs for setting up [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) diff --git a/compliance/flexera/iam_explicit_user_roles/README.md b/compliance/flexera/iam/iam_explicit_user_roles/README.md similarity index 100% rename from compliance/flexera/iam_explicit_user_roles/README.md rename to compliance/flexera/iam/iam_explicit_user_roles/README.md diff --git a/compliance/flexera/iam_explicit_user_roles/flexera_iam_explicit_user_roles.pt b/compliance/flexera/iam/iam_explicit_user_roles/flexera_iam_explicit_user_roles.pt similarity index 96% rename from compliance/flexera/iam_explicit_user_roles/flexera_iam_explicit_user_roles.pt rename to compliance/flexera/iam/iam_explicit_user_roles/flexera_iam_explicit_user_roles.pt index 8c7b9cdda9..ba1c26fb65 100644 --- a/compliance/flexera/iam_explicit_user_roles/flexera_iam_explicit_user_roles.pt +++ b/compliance/flexera/iam/iam_explicit_user_roles/flexera_iam_explicit_user_roles.pt @@ -1,14 +1,14 @@ name "Flexera IAM Explicit User Roles" rs_pt_ver 20180301 type "policy" -short_description "Identifies users in Flexera IAM that have explicit user roles assigned.\n See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/iam_explicit_user_roles) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Identifies users in Flexera IAM that have explicit user roles assigned. See the [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/iam/iam_explicit_user_roles) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Compliance" severity "medium" tenancy "single" default_frequency "hourly" info( - version: "3.0", + version: "3.1", provider: "Flexera", service: "IAM", policy_set: "" diff --git a/msp/compliance/orgs_and_cloud_accounts_report/CHANGELOG.md b/compliance/flexera/msp/orgs_and_cloud_accounts_report/CHANGELOG.md similarity index 76% rename from msp/compliance/orgs_and_cloud_accounts_report/CHANGELOG.md rename to compliance/flexera/msp/orgs_and_cloud_accounts_report/CHANGELOG.md index 2d32781892..9a11c26981 100644 --- a/msp/compliance/orgs_and_cloud_accounts_report/CHANGELOG.md +++ b/compliance/flexera/msp/orgs_and_cloud_accounts_report/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.5 + +- fixed link to README in policy description + ## v1.4 - Modified escalation label and description for consistency diff --git a/msp/compliance/orgs_and_cloud_accounts_report/README.md b/compliance/flexera/msp/orgs_and_cloud_accounts_report/README.md similarity index 100% rename from msp/compliance/orgs_and_cloud_accounts_report/README.md rename to compliance/flexera/msp/orgs_and_cloud_accounts_report/README.md diff --git a/msp/compliance/orgs_and_cloud_accounts_report/orgs_and_cloud_accounts_report.pt b/compliance/flexera/msp/orgs_and_cloud_accounts_report/orgs_and_cloud_accounts_report.pt similarity index 98% rename from msp/compliance/orgs_and_cloud_accounts_report/orgs_and_cloud_accounts_report.pt rename to compliance/flexera/msp/orgs_and_cloud_accounts_report/orgs_and_cloud_accounts_report.pt index 5014e2742e..2446bb75c3 100644 --- a/msp/compliance/orgs_and_cloud_accounts_report/orgs_and_cloud_accounts_report.pt +++ b/compliance/flexera/msp/orgs_and_cloud_accounts_report/orgs_and_cloud_accounts_report.pt @@ -3,12 +3,12 @@ rs_pt_ver 20180301 type "policy" short_description "This policy generates a list of cross organization Cloud Vendor Accounts connected to Flexera Optima based on the bill connection settings for Azure and Google, as well as full list of AWS accounts under the payer account connected for each Flexera Organization.\n -See [README] for more details" +See [README](https://github.com/flexera-public/policy_templates/tree/master/compliance/flexera/msp/orgs_and_cloud_accounts_report) for more details" long_description "" severity "low" category "Compliance" info( - version: "1.4", + version: "1.5", provider: "Flexera Optima", service: "", policy_set: "", diff --git a/cost/aws/burstable_ec2_instances/CHANGELOG.md b/cost/aws/burstable_ec2_instances/CHANGELOG.md index 6e966bacda..272b3620b1 100644 --- a/cost/aws/burstable_ec2_instances/CHANGELOG.md +++ b/cost/aws/burstable_ec2_instances/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v4.1 + +- fixed link to README in policy description + ## v4.0 - Policy name changed to reference EC2 service directly diff --git a/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances.pt b/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances.pt index 23f4e5e20e..45ac07ef38 100644 --- a/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances.pt +++ b/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances.pt @@ -1,13 +1,13 @@ name "AWS Burstable EC2 Instances" rs_pt_ver 20180301 type "policy" -short_description "Gathers Burst Credit and AWS CloudWatch CPU data for EC2 instances on 30 day intervals. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/aws/burstable_instance_cloudwatch_credit_utilization/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Gathers Burst Credit and AWS CloudWatch CPU data for EC2 instances on 30 day intervals. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/aws/burstable_ec2_instances/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "monthly" info( - version: "4.0", + version: "4.1", provider: "AWS", service: "Compute", policy_set: "Burstable Compute Instances" diff --git a/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances_meta_parent.pt b/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances_meta_parent.pt index 578bfb2ae0..70c464877f 100644 --- a/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances_meta_parent.pt +++ b/cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances_meta_parent.pt @@ -8,7 +8,7 @@ tenancy "single" default_frequency "15 minutes" info( provider: "AWS", - version: "4.0", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability + version: "4.1", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability publish: "false" ) diff --git a/cost/aws/reserved_instances/compute_purchase_recommendation/CHANGELOG.md b/cost/aws/reserved_instances/compute_purchase_recommendation/CHANGELOG.md index f27bcd41f2..5d28649d16 100644 --- a/cost/aws/reserved_instances/compute_purchase_recommendation/CHANGELOG.md +++ b/cost/aws/reserved_instances/compute_purchase_recommendation/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v0.3 + +- fixed link to README in policy description + ## v0.2 - Changed service metadata to "Compute" to ensure proper incident scraping diff --git a/cost/aws/reserved_instances/compute_purchase_recommendation/aws_reserved_instance_recommendations_with_purchase.pt b/cost/aws/reserved_instances/compute_purchase_recommendation/aws_reserved_instance_recommendations_with_purchase.pt index 7c7d73a8e7..1fd335e8f6 100644 --- a/cost/aws/reserved_instances/compute_purchase_recommendation/aws_reserved_instance_recommendations_with_purchase.pt +++ b/cost/aws/reserved_instances/compute_purchase_recommendation/aws_reserved_instance_recommendations_with_purchase.pt @@ -1,14 +1,13 @@ name "AWS Reserved Instances Recommendations with Purchase" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when AWS RI Recommendations are identified and allows the user the make RI purchases after approval. NOTE: These RI Purchase Recommendations are generated by AWS. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/aws/reserved_instances/recommendations) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." -long_description "Version: 0.1" +short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when AWS RI Recommendations are identified and allows the user the make RI purchases after approval. NOTE: These RI Purchase Recommendations are generated by AWS. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/aws/reserved_instances/compute_purchase_recommendation) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +long_description "" severity "medium" -tenancy "single" category "Cost" default_frequency "daily" info( - version: "0.2", + version: "0.3", provider: "AWS", service: "Compute", policy_set: "Reserved Instance", diff --git a/cost/aws/savings_plan/expiration/CHANGELOG.md b/cost/aws/savings_plan/expiration/CHANGELOG.md index 0c8e27d833..a9d78ae6c9 100644 --- a/cost/aws/savings_plan/expiration/CHANGELOG.md +++ b/cost/aws/savings_plan/expiration/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.1 + +- fixed link to README in policy description + ## v2.0 - Initial Release diff --git a/cost/aws/savings_plan/expiration/aws_savings_plan_expiration.pt b/cost/aws/savings_plan/expiration/aws_savings_plan_expiration.pt index fda21de68f..2bea498078 100644 --- a/cost/aws/savings_plan/expiration/aws_savings_plan_expiration.pt +++ b/cost/aws/savings_plan/expiration/aws_savings_plan_expiration.pt @@ -1,14 +1,14 @@ name "AWS Expiring Savings Plans" rs_pt_ver 20180301 type "policy" -short_description "A policy that sends email notifications before AWS Savings Plan expire. See the [README](https://github.com/flexera/policy_templates/tree/master/cost/aws/savings_plan/expiration) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "A policy that sends email notifications before AWS Savings Plan expire. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/aws/savings_plan/expiration) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" tenancy "single" default_frequency "daily" info( - version: "2.0", + version: "2.1", provider: "Flexera Optima", service: "", policy_set: "" diff --git a/cost/azure/savings_plan/recommendations/azure_savings_plan_recommendations.pt b/cost/azure/savings_plan/recommendations/azure_savings_plan_recommendations.pt index 3bfa7b1197..094b887ab6 100644 --- a/cost/azure/savings_plan/recommendations/azure_savings_plan_recommendations.pt +++ b/cost/azure/savings_plan/recommendations/azure_savings_plan_recommendations.pt @@ -1,7 +1,7 @@ name "Azure Savings Plan Recommendations" rs_pt_ver 20180301 type "policy" -short_description "A policy that sends email notifications when Azure Savings Plan Recommendations are identified. NOTE: These Savings Plan Purchase Recommendations are generated by Microsoft Azure. See the [README](https://github.com/flexera/policy_templates/tree/master/cost/azure/savings_plan/recommendations) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "A policy that sends email notifications when Azure Savings Plan Recommendations are identified. NOTE: These Savings Plan Purchase Recommendations are generated by Microsoft Azure. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/azure/savings_plan/recommendations) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" diff --git a/cost/email_recommendations/CHANGELOG.md b/cost/email_recommendations/CHANGELOG.md deleted file mode 100644 index 16ca1ac74e..0000000000 --- a/cost/email_recommendations/CHANGELOG.md +++ /dev/null @@ -1,5 +0,0 @@ -# Changelog - -## v0.1 - -- Initial Release diff --git a/cost/billing_center_cost_anomaly/CHANGELOG.md b/cost/flexera/cco/billing_center_cost_anomaly/CHANGELOG.md similarity index 95% rename from cost/billing_center_cost_anomaly/CHANGELOG.md rename to cost/flexera/cco/billing_center_cost_anomaly/CHANGELOG.md index 9e16b03fe9..30942ac186 100644 --- a/cost/billing_center_cost_anomaly/CHANGELOG.md +++ b/cost/flexera/cco/billing_center_cost_anomaly/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- Updated description to account for new file path in Github repository + ## v2.1 - Deprecated: This policy is no longer being updated. diff --git a/cost/billing_center_cost_anomaly/README.md b/cost/flexera/cco/billing_center_cost_anomaly/README.md similarity index 100% rename from cost/billing_center_cost_anomaly/README.md rename to cost/flexera/cco/billing_center_cost_anomaly/README.md diff --git a/cost/billing_center_cost_anomaly/billing_center_cost_anomaly.pt b/cost/flexera/cco/billing_center_cost_anomaly/billing_center_cost_anomaly.pt similarity index 97% rename from cost/billing_center_cost_anomaly/billing_center_cost_anomaly.pt rename to cost/flexera/cco/billing_center_cost_anomaly/billing_center_cost_anomaly.pt index 983b61aac1..939ab81d88 100644 --- a/cost/billing_center_cost_anomaly/billing_center_cost_anomaly.pt +++ b/cost/flexera/cco/billing_center_cost_anomaly/billing_center_cost_anomaly.pt @@ -1,7 +1,7 @@ name "Billing Center Cost Anomalies" rs_pt_ver 20180301 type "policy" -short_description "Analyze all Billing Centers for a specified number of days and raise an incident if the percentage of spend (compared to the previous period of the same number of days) has surpassed the defined threshold. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/billing_center_cost_anomaly/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Analyze all Billing Centers for a specified number of days and raise an incident if the percentage of spend (compared to the previous period of the same number of days) has surpassed the defined threshold. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/billing_center_cost_anomaly/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Cost" @@ -9,7 +9,7 @@ tenancy "single" default_frequency "daily" info( publish: "false", - version: "2.1", + version: "2.2", provider: "Flexera Optima", service: "", policy_set:"" @@ -88,7 +88,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/budget_alerts/CHANGELOG.md b/cost/flexera/cco/budget_alerts/CHANGELOG.md similarity index 96% rename from cost/budget_alerts/CHANGELOG.md rename to cost/flexera/cco/budget_alerts/CHANGELOG.md index 5b7783f2a6..5456a672b5 100644 --- a/cost/budget_alerts/CHANGELOG.md +++ b/cost/flexera/cco/budget_alerts/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.4 + +- Updated description to account for new file path in Github repository + ## v2.3 - Added Deprecated description in the short description diff --git a/cost/budget_alerts/README.md b/cost/flexera/cco/budget_alerts/README.md similarity index 100% rename from cost/budget_alerts/README.md rename to cost/flexera/cco/budget_alerts/README.md diff --git a/cost/budget_alerts/budget_alert.pt b/cost/flexera/cco/budget_alerts/budget_alert.pt similarity index 98% rename from cost/budget_alerts/budget_alert.pt rename to cost/flexera/cco/budget_alerts/budget_alert.pt index 10319f3995..cb9539101e 100644 --- a/cost/budget_alerts/budget_alert.pt +++ b/cost/flexera/cco/budget_alerts/budget_alert.pt @@ -1,14 +1,14 @@ name "Budget Alerts (Legacy)" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Create a Monthly Budget Alert for a Billing Center or for the entire Organization. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/budget_alerts/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Create a Monthly Budget Alert for a Billing Center or for the entire Organization. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/budget_alerts/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" tenancy "single" default_frequency "daily" info( - version: "2.3", + version: "2.4", provider: "Flexera Optima", service: "", policy_set: "", @@ -78,7 +78,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/budget_alerts_by_account/CHANGELOG.md b/cost/flexera/cco/budget_alerts_by_account/CHANGELOG.md similarity index 95% rename from cost/budget_alerts_by_account/CHANGELOG.md rename to cost/flexera/cco/budget_alerts_by_account/CHANGELOG.md index 895019f42c..955545b055 100644 --- a/cost/budget_alerts_by_account/CHANGELOG.md +++ b/cost/flexera/cco/budget_alerts_by_account/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Resolved issues with calculating forecast diff --git a/cost/budget_alerts_by_account/README.md b/cost/flexera/cco/budget_alerts_by_account/README.md similarity index 100% rename from cost/budget_alerts_by_account/README.md rename to cost/flexera/cco/budget_alerts_by_account/README.md diff --git a/cost/budget_alerts_by_account/budget_alerts_by_account.pt b/cost/flexera/cco/budget_alerts_by_account/budget_alerts_by_account.pt similarity index 98% rename from cost/budget_alerts_by_account/budget_alerts_by_account.pt rename to cost/flexera/cco/budget_alerts_by_account/budget_alerts_by_account.pt index c81ed47746..8b431e6218 100644 --- a/cost/budget_alerts_by_account/budget_alerts_by_account.pt +++ b/cost/flexera/cco/budget_alerts_by_account/budget_alerts_by_account.pt @@ -1,14 +1,14 @@ name "Budget Alerts by Cloud Account" rs_pt_ver 20180301 type "policy" -short_description "Create a Monthly Budget Alert for a Cloud Vendor Account. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/budget_alerts_by_account/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Create a Monthly Budget Alert for a Cloud Vendor Account. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/budget_alerts_by_account/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" tenancy "single" default_frequency "daily" info( - version: "2.2", + version: "2.3", provider: "Flexera Optima", service: "", policy_set: "" @@ -68,7 +68,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/budget_report_alerts/CHANGELOG.md b/cost/flexera/cco/budget_report_alerts/CHANGELOG.md similarity index 70% rename from cost/budget_report_alerts/CHANGELOG.md rename to cost/flexera/cco/budget_report_alerts/CHANGELOG.md index fc2f914534..2661c5c3a7 100644 --- a/cost/budget_report_alerts/CHANGELOG.md +++ b/cost/flexera/cco/budget_report_alerts/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- Updated description to account for new file path in Github repository + ## v3.0 - Added a parameter to enable budget tracking for specific dimensions and values diff --git a/cost/budget_report_alerts/README.md b/cost/flexera/cco/budget_report_alerts/README.md similarity index 100% rename from cost/budget_report_alerts/README.md rename to cost/flexera/cco/budget_report_alerts/README.md diff --git a/cost/budget_report_alerts/budget_report_alerts.pt b/cost/flexera/cco/budget_report_alerts/budget_report_alerts.pt similarity index 98% rename from cost/budget_report_alerts/budget_report_alerts.pt rename to cost/flexera/cco/budget_report_alerts/budget_report_alerts.pt index cf0aa98f3b..8b6ec2220c 100644 --- a/cost/budget_report_alerts/budget_report_alerts.pt +++ b/cost/flexera/cco/budget_report_alerts/budget_report_alerts.pt @@ -1,13 +1,13 @@ name "Budget Alerts" rs_pt_ver 20180301 type "policy" -short_description "This policy utilizes the Flexera Budget API to detect if budget threshold has been exceeded for a selected budget. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/budget_report_alerts/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "This policy utilizes the Flexera Budget API to detect if budget threshold has been exceeded for a selected budget. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/budget_report_alerts/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." severity "medium" category "Cost" tenancy "single" default_frequency "daily" info( - version: "3.0", + version: "3.1", provider: "Flexera Optima", service: "", policy_set: "" @@ -86,7 +86,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/budget_v_actual/CHANGELOG.md b/cost/flexera/cco/budget_v_actual/CHANGELOG.md similarity index 92% rename from cost/budget_v_actual/CHANGELOG.md rename to cost/flexera/cco/budget_v_actual/CHANGELOG.md index f23c01a99b..c4b5dff939 100644 --- a/cost/budget_v_actual/CHANGELOG.md +++ b/cost/flexera/cco/budget_v_actual/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- Updated description to account for new file path in Github repository + ## v2.1 - Deprecated: This policy is no longer being updated. diff --git a/cost/budget_v_actual/README.md b/cost/flexera/cco/budget_v_actual/README.md similarity index 100% rename from cost/budget_v_actual/README.md rename to cost/flexera/cco/budget_v_actual/README.md diff --git a/cost/budget_v_actual/monthly_budget_v_actual.pt b/cost/flexera/cco/budget_v_actual/monthly_budget_v_actual.pt similarity index 97% rename from cost/budget_v_actual/monthly_budget_v_actual.pt rename to cost/flexera/cco/budget_v_actual/monthly_budget_v_actual.pt index 26b30fcbbe..aca15fc1c8 100644 --- a/cost/budget_v_actual/monthly_budget_v_actual.pt +++ b/cost/flexera/cco/budget_v_actual/monthly_budget_v_actual.pt @@ -1,13 +1,13 @@ name "Monthly Actual v. Budgeted Spend Report" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** This policy allows you to set up scheduled reports that will provide monthly actual v. budgeted cloud cost across all resources in the Billing Center(s) you specify, delivered to any email addresses you specify. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/budget_v_actual) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** This policy allows you to set up scheduled reports that will provide monthly actual v. budgeted cloud cost across all resources in the Billing Center(s) you specify, delivered to any email addresses you specify. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/budget_v_actual) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." severity "low" category "Cost" tenancy "single" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Flexera Optima", service: "", policy_set: "", @@ -116,7 +116,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end @@ -392,7 +392,7 @@ policy "policy_scheduled_report" do ## Billing Center(s): {{ data.billingCenters }} ![Actual v. Monthly Cost Report](https://image-charts.com/chart?{{ data.chartType }}&{{ data.chartData }}&{{ data.chartSize }}&{{ data.chartLabels }}&{{ data.chartAxis }}&{{ data.chartAxisFormat }} "Actual v. Monthly Cost Report") ### For more detailed cost information, visit [Optima](https://analytics.rightscale.com/orgs/{{ rs_org_id }}/dashboard). -For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/budget_v_actual). +For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/budget_v_actual). ___ ###### Policy Applied in Account: {{ rs_project_name }} (Account ID: {{ rs_project_id }}) within Org: {{ rs_org_name }} (Org ID: {{ rs_org_id }}) EOS diff --git a/cost/budget_v_actual_spend_report/CHANGELOG.md b/cost/flexera/cco/budget_v_actual_spend_report/CHANGELOG.md similarity index 84% rename from cost/budget_v_actual_spend_report/CHANGELOG.md rename to cost/flexera/cco/budget_v_actual_spend_report/CHANGELOG.md index 332d670802..be035fa018 100644 --- a/cost/budget_v_actual_spend_report/CHANGELOG.md +++ b/cost/flexera/cco/budget_v_actual_spend_report/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.3 + +- Updated description to account for new file path in Github repository + ## v2.2 - Fixed work with unbudgeted spend for new API diff --git a/cost/budget_v_actual_spend_report/README.md b/cost/flexera/cco/budget_v_actual_spend_report/README.md similarity index 100% rename from cost/budget_v_actual_spend_report/README.md rename to cost/flexera/cco/budget_v_actual_spend_report/README.md diff --git a/cost/budget_v_actual_spend_report/budget_v_actual_spend_report.pt b/cost/flexera/cco/budget_v_actual_spend_report/budget_v_actual_spend_report.pt similarity index 97% rename from cost/budget_v_actual_spend_report/budget_v_actual_spend_report.pt rename to cost/flexera/cco/budget_v_actual_spend_report/budget_v_actual_spend_report.pt index 36b56c5b34..5df0aa052e 100644 --- a/cost/budget_v_actual_spend_report/budget_v_actual_spend_report.pt +++ b/cost/flexera/cco/budget_v_actual_spend_report/budget_v_actual_spend_report.pt @@ -1,14 +1,14 @@ name "Budget vs Actual Spend Report" rs_pt_ver 20180301 type "policy" -short_description "Emails a report comparing budget vs actual spend to stakeholders. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/budget_v_actual_spend_report/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Emails a report comparing budget vs actual spend to stakeholders. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/budget_v_actual_spend_report/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" tenancy "single" default_frequency "daily" info( - version: "2.2", + version: "2.3", provider: "Flexera Optima", service: "", policy_set: "" @@ -98,7 +98,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/cheaper_regions/CHANGELOG.md b/cost/flexera/cco/cheaper_regions/CHANGELOG.md similarity index 94% rename from cost/cheaper_regions/CHANGELOG.md rename to cost/flexera/cco/cheaper_regions/CHANGELOG.md index fbb01df2b9..9e540269f7 100644 --- a/cost/cheaper_regions/CHANGELOG.md +++ b/cost/flexera/cco/cheaper_regions/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- Updated description to account for new file path in Github repository + ## v2.1 - added vendor type for Azure CSP's diff --git a/cost/cheaper_regions/README.md b/cost/flexera/cco/cheaper_regions/README.md similarity index 100% rename from cost/cheaper_regions/README.md rename to cost/flexera/cco/cheaper_regions/README.md diff --git a/cost/cheaper_regions/cheaper_regions.pt b/cost/flexera/cco/cheaper_regions/cheaper_regions.pt similarity index 98% rename from cost/cheaper_regions/cheaper_regions.pt rename to cost/flexera/cco/cheaper_regions/cheaper_regions.pt index 22ca1aae77..5487dfeb77 100644 --- a/cost/cheaper_regions/cheaper_regions.pt +++ b/cost/flexera/cco/cheaper_regions/cheaper_regions.pt @@ -1,14 +1,14 @@ name "Cheaper Regions" rs_pt_ver 20180301 type "policy" -short_description "Specify which regions have cheaper alternatives by specifying the expensive region name and the cheaper region name for analysis. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/cheaper_regions/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Specify which regions have cheaper alternatives by specifying the expensive region name and the cheaper region name for analysis. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/cheaper_regions/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" tenancy "single" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Flexera Optima", service: "", policy_set: "" @@ -374,4 +374,3 @@ escalation "email" do description "Send incident email" email $param_email end - diff --git a/cost/cloud_cost_anomaly_alerts/CHANGELOG.md b/cost/flexera/cco/cloud_cost_anomaly_alerts/CHANGELOG.md similarity index 94% rename from cost/cloud_cost_anomaly_alerts/CHANGELOG.md rename to cost/flexera/cco/cloud_cost_anomaly_alerts/CHANGELOG.md index fa85eb0a8c..917d98d356 100644 --- a/cost/cloud_cost_anomaly_alerts/CHANGELOG.md +++ b/cost/flexera/cco/cloud_cost_anomaly_alerts/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.3 + +- Updated description to account for new file path in Github repository + ## v3.2 - Fixed bug where incident showed dimensions from column `Grouping Dimensions` in random order diff --git a/cost/cloud_cost_anomaly_alerts/README.md b/cost/flexera/cco/cloud_cost_anomaly_alerts/README.md similarity index 100% rename from cost/cloud_cost_anomaly_alerts/README.md rename to cost/flexera/cco/cloud_cost_anomaly_alerts/README.md diff --git a/cost/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt b/cost/flexera/cco/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt similarity index 97% rename from cost/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt rename to cost/flexera/cco/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt index c00da8aaa3..a3dbe22079 100644 --- a/cost/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt +++ b/cost/flexera/cco/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt @@ -1,13 +1,13 @@ name "Cloud Cost Anomaly Alerts" rs_pt_ver 20180301 type "policy" -short_description "Report any cloud cost anomalies detected by Flexera CCO. See the [README](https://github.com/rightscale/policy_templates/tree/master/cost/cloud_cost_anomaly_alerts/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Report any cloud cost anomalies detected by Flexera CCO. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/cloud_cost_anomaly_alerts/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Cost" severity "high" default_frequency "daily" info( - version: "3.2", + version: "3.3", provider: "Flexera", service: "Optima", policy_set: "" @@ -116,7 +116,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/currency_conversion/CHANGELOG.md b/cost/flexera/cco/currency_conversion/CHANGELOG.md similarity index 81% rename from cost/currency_conversion/CHANGELOG.md rename to cost/flexera/cco/currency_conversion/CHANGELOG.md index 2bd3fddd01..964734a816 100644 --- a/cost/currency_conversion/CHANGELOG.md +++ b/cost/flexera/cco/currency_conversion/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- Updated description to account for new file path in Github repository + ## v2.1 - Added parameters to allow the user to configure currency conversion for previous months diff --git a/cost/currency_conversion/README.md b/cost/flexera/cco/currency_conversion/README.md similarity index 100% rename from cost/currency_conversion/README.md rename to cost/flexera/cco/currency_conversion/README.md diff --git a/cost/currency_conversion/currency_conversion.pt b/cost/flexera/cco/currency_conversion/currency_conversion.pt similarity index 98% rename from cost/currency_conversion/currency_conversion.pt rename to cost/flexera/cco/currency_conversion/currency_conversion.pt index 5fbea8cc69..03297921e2 100644 --- a/cost/currency_conversion/currency_conversion.pt +++ b/cost/flexera/cco/currency_conversion/currency_conversion.pt @@ -1,13 +1,13 @@ name "Currency Conversion" rs_pt_ver 20180301 type "policy" -short_description "A policy that creates an adjustment rule that converts the currency of the cost of the Cloud Vendor of choice. It utilizes xe.com to retrieve the latest exchange rates. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/currency_conversion/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "A policy that creates an adjustment rule that converts the currency of the cost of the Cloud Vendor of choice. It utilizes xe.com to retrieve the latest exchange rates. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/currency_conversion/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" default_frequency "monthly" category "Cost" info( - version: "2.1", + version: "2.2", provider: "", service: "", policy_set: "" diff --git a/cost/flexera/cco/email_recommendations/CHANGELOG.md b/cost/flexera/cco/email_recommendations/CHANGELOG.md new file mode 100644 index 0000000000..1fdaf1d49e --- /dev/null +++ b/cost/flexera/cco/email_recommendations/CHANGELOG.md @@ -0,0 +1,9 @@ +# Changelog + +## v0.2 + +- Updated description to account for new file path in Github repository + +## v0.1 + +- Initial Release diff --git a/cost/email_recommendations/README.md b/cost/flexera/cco/email_recommendations/README.md similarity index 100% rename from cost/email_recommendations/README.md rename to cost/flexera/cco/email_recommendations/README.md diff --git a/cost/email_recommendations/email_recommendations.pt b/cost/flexera/cco/email_recommendations/email_recommendations.pt similarity index 97% rename from cost/email_recommendations/email_recommendations.pt rename to cost/flexera/cco/email_recommendations/email_recommendations.pt index d6e6f7b6f3..99e9e6b093 100644 --- a/cost/email_recommendations/email_recommendations.pt +++ b/cost/flexera/cco/email_recommendations/email_recommendations.pt @@ -1,13 +1,13 @@ name "Email Cost Optimization Recommendations" rs_pt_ver 20180301 type "policy" -short_description "Emails a list of cost recommendations pulled from the Flexera Optimization dashboard. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/email_recommendations/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Emails a list of cost recommendations pulled from the Flexera Optimization dashboard. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/email_recommendations/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "weekly" info( - version: "0.1", + version: "0.2", provider: "Flexera" ) @@ -133,7 +133,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/forecasting/commitment_forecast/CHANGELOG.md b/cost/flexera/cco/forecasting/commitment_forecast/CHANGELOG.md similarity index 91% rename from cost/forecasting/commitment_forecast/CHANGELOG.md rename to cost/flexera/cco/forecasting/commitment_forecast/CHANGELOG.md index df4e5f8967..5830330ec2 100644 --- a/cost/forecasting/commitment_forecast/CHANGELOG.md +++ b/cost/flexera/cco/forecasting/commitment_forecast/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.3 + +- Updated description to account for new file path in Github repository + ## v3.2 - Updated indentation for chart url so it renders corrrectly in the policy incident email diff --git a/cost/forecasting/commitment_forecast/README.md b/cost/flexera/cco/forecasting/commitment_forecast/README.md similarity index 100% rename from cost/forecasting/commitment_forecast/README.md rename to cost/flexera/cco/forecasting/commitment_forecast/README.md diff --git a/cost/forecasting/commitment_forecast/commitment_forecast.pt b/cost/flexera/cco/forecasting/commitment_forecast/commitment_forecast.pt similarity index 97% rename from cost/forecasting/commitment_forecast/commitment_forecast.pt rename to cost/flexera/cco/forecasting/commitment_forecast/commitment_forecast.pt index 45ad4e672b..f22ff71744 100644 --- a/cost/forecasting/commitment_forecast/commitment_forecast.pt +++ b/cost/flexera/cco/forecasting/commitment_forecast/commitment_forecast.pt @@ -1,14 +1,14 @@ name "Vendor Commitment Forecast" rs_pt_ver 20180301 type "policy" -short_description "This policy allows the user to specify a Commitment target value (based on the commitment amount agreed with your Cloud Service Provider/s), and track the current commitment spend to date, as well as projected commitment spend over a period. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/forecasting/commitment_forecast/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "This policy allows the user to specify a Commitment target value (based on the commitment amount agreed with your Cloud Service Provider/s), and track the current commitment spend to date, as well as projected commitment spend over a period. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/forecasting/commitment_forecast/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" tenancy "single" default_frequency "monthly" info( - version: "3.2", + version: "3.3", provider: "Flexera Optima", service: "", policy_set:"Forecasting", @@ -81,7 +81,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/forecasting/moving_average/CHANGELOG.md b/cost/flexera/cco/forecasting/moving_average/CHANGELOG.md similarity index 91% rename from cost/forecasting/moving_average/CHANGELOG.md rename to cost/flexera/cco/forecasting/moving_average/CHANGELOG.md index 4de862dfc1..5b8a176481 100644 --- a/cost/forecasting/moving_average/CHANGELOG.md +++ b/cost/flexera/cco/forecasting/moving_average/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.2 + +- Updated description to account for new file path in Github repository + ## v3.1 - Updated `js_generate_past_month_list` logic to fix bug where start date and end date clash when running policy at the end of January diff --git a/cost/forecasting/moving_average/README.md b/cost/flexera/cco/forecasting/moving_average/README.md similarity index 100% rename from cost/forecasting/moving_average/README.md rename to cost/flexera/cco/forecasting/moving_average/README.md diff --git a/cost/forecasting/moving_average/moving_average_forecast.pt b/cost/flexera/cco/forecasting/moving_average/moving_average_forecast.pt similarity index 97% rename from cost/forecasting/moving_average/moving_average_forecast.pt rename to cost/flexera/cco/forecasting/moving_average/moving_average_forecast.pt index e44dd6462f..60fbafa86c 100644 --- a/cost/forecasting/moving_average/moving_average_forecast.pt +++ b/cost/flexera/cco/forecasting/moving_average/moving_average_forecast.pt @@ -1,14 +1,14 @@ name "Cloud Spend Forecast - Moving Average" rs_pt_ver 20180301 type "policy" -short_description "Pulls the cost data for lookback period then generates a moving average forecast of cloud spend for the specified months. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/forecasting/moving_average/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Pulls the cost data for lookback period then generates a moving average forecast of cloud spend for the specified months. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/forecasting/moving_average/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Cost" tenancy "single" default_frequency "daily" info( - version: "3.1", + version: "3.2", provider: "Flexera Optima", service: "", policy_set: "Forecasting" @@ -73,7 +73,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/forecasting/straight_line_forecast/linear_regression/CHANGELOG.md b/cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/CHANGELOG.md similarity index 90% rename from cost/forecasting/straight_line_forecast/linear_regression/CHANGELOG.md rename to cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/CHANGELOG.md index fc81e2e099..318592d50a 100644 --- a/cost/forecasting/straight_line_forecast/linear_regression/CHANGELOG.md +++ b/cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## v3.5 + +- fixed link to README in policy description + +## v3.4 + +- Updated description to account for new file path in Github repository + ## v3.3 - Updated policy to take only top-level billing center costs diff --git a/cost/forecasting/straight_line_forecast/linear_regression/README.md b/cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/README.md similarity index 100% rename from cost/forecasting/straight_line_forecast/linear_regression/README.md rename to cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/README.md diff --git a/cost/forecasting/straight_line_forecast/linear_regression/straight_line_forecast_linear_regression.pt b/cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/straight_line_forecast_linear_regression.pt similarity index 98% rename from cost/forecasting/straight_line_forecast/linear_regression/straight_line_forecast_linear_regression.pt rename to cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/straight_line_forecast_linear_regression.pt index 9632ce90ff..8740c908b1 100644 --- a/cost/forecasting/straight_line_forecast/linear_regression/straight_line_forecast_linear_regression.pt +++ b/cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/straight_line_forecast_linear_regression.pt @@ -1,14 +1,14 @@ name "Cloud Spend Forecast - Straight-Line (Linear Regression Model)" rs_pt_ver 20180301 type "policy" -short_description "Pulls the cost data for lookback period then generates a Straight-Line Forecast for the specified months using a Linear Regression model. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/forecasting/straight_line_forecast/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Pulls the cost data for lookback period then generates a Straight-Line Forecast for the specified months using a Linear Regression model. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/forecasting/straight_line_forecast/linear_regression/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Cost" tenancy "single" default_frequency "monthly" info( - version: "3.3", + version: "3.5", provider: "Flexera Optima", service: "", policy_set: "Forecasting" @@ -80,7 +80,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end @@ -128,7 +128,7 @@ end datasource "ds_top_level_billing_centers" do run_script $js_top_level_bc, $ds_billing_centers end - + script "js_top_level_bc", type: "javascript" do parameters "billing_centers" result "filtered_billing_centers" diff --git a/cost/forecasting/straight_line_forecast/simple/CHANGELOG.md b/cost/flexera/cco/forecasting/straight_line_forecast/simple/CHANGELOG.md similarity index 91% rename from cost/forecasting/straight_line_forecast/simple/CHANGELOG.md rename to cost/flexera/cco/forecasting/straight_line_forecast/simple/CHANGELOG.md index 01d6a3d392..977e2f88cd 100644 --- a/cost/forecasting/straight_line_forecast/simple/CHANGELOG.md +++ b/cost/flexera/cco/forecasting/straight_line_forecast/simple/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## v3.5 + +- fixed link to README in policy description + +## v3.4 + +- Updated description to account for new file path in Github repository + ## v3.3 - Updated policy to take only top-level billing center costs diff --git a/cost/forecasting/straight_line_forecast/simple/README.md b/cost/flexera/cco/forecasting/straight_line_forecast/simple/README.md similarity index 100% rename from cost/forecasting/straight_line_forecast/simple/README.md rename to cost/flexera/cco/forecasting/straight_line_forecast/simple/README.md diff --git a/cost/forecasting/straight_line_forecast/simple/straight_line_forecast_simple.pt b/cost/flexera/cco/forecasting/straight_line_forecast/simple/straight_line_forecast_simple.pt similarity index 98% rename from cost/forecasting/straight_line_forecast/simple/straight_line_forecast_simple.pt rename to cost/flexera/cco/forecasting/straight_line_forecast/simple/straight_line_forecast_simple.pt index 706839f25e..d7183474e5 100644 --- a/cost/forecasting/straight_line_forecast/simple/straight_line_forecast_simple.pt +++ b/cost/flexera/cco/forecasting/straight_line_forecast/simple/straight_line_forecast_simple.pt @@ -1,14 +1,14 @@ name "Cloud Spend Forecast - Straight-Line (Simple Model)" rs_pt_ver 20180301 type "policy" -short_description "Pulls the cost data for lookback period then generates a Straight-Line Forecast on cloud spend for the specified months using a Simple model. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/forecasting/straight_line_forecast/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Pulls the cost data for lookback period then generates a Straight-Line Forecast on cloud spend for the specified months using a Simple model. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/forecasting/straight_line_forecast/simple/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Cost" tenancy "single" default_frequency "monthly" info( - version: "3.3", + version: "3.5", provider: "Flexera Optima", service: "", policy_set: "Forecasting" @@ -80,7 +80,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end @@ -128,7 +128,7 @@ end datasource "ds_top_level_billing_centers" do run_script $js_top_level_bc, $ds_billing_centers end - + script "js_top_level_bc", type: "javascript" do parameters "billing_centers" result "filtered_billing_centers" diff --git a/cost/low_account_usage/CHANGELOG.md b/cost/flexera/cco/low_account_usage/CHANGELOG.md similarity index 95% rename from cost/low_account_usage/CHANGELOG.md rename to cost/flexera/cco/low_account_usage/CHANGELOG.md index b1c0f4adf0..a429995789 100644 --- a/cost/low_account_usage/CHANGELOG.md +++ b/cost/flexera/cco/low_account_usage/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.5 + +- Updated description to account for new file path in Github repository + ## v2.4 - Added `Account ID` incident field. diff --git a/cost/low_account_usage/README.md b/cost/flexera/cco/low_account_usage/README.md similarity index 100% rename from cost/low_account_usage/README.md rename to cost/flexera/cco/low_account_usage/README.md diff --git a/cost/low_account_usage/low_account_usage.pt b/cost/flexera/cco/low_account_usage/low_account_usage.pt similarity index 97% rename from cost/low_account_usage/low_account_usage.pt rename to cost/flexera/cco/low_account_usage/low_account_usage.pt index 6dbb0a6bbd..0554ccf200 100644 --- a/cost/low_account_usage/low_account_usage.pt +++ b/cost/flexera/cco/low_account_usage/low_account_usage.pt @@ -1,14 +1,14 @@ name "Low Account Usage" rs_pt_ver 20180301 type "policy" -short_description "Analyze all account usage and determines recommend consolidation or deletion. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/low_account_usage/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Analyze all account usage and determines recommend consolidation or deletion. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/low_account_usage/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "daily" tenancy "single" info( - version: "2.4", + version: "2.5", provider: "Flexera Optima", service: "", policy_set: "" diff --git a/cost/low_service_usage/CHANGELOG.md b/cost/flexera/cco/low_service_usage/CHANGELOG.md similarity index 94% rename from cost/low_service_usage/CHANGELOG.md rename to cost/flexera/cco/low_service_usage/CHANGELOG.md index 77a7fe14b8..f87abf4861 100644 --- a/cost/low_service_usage/CHANGELOG.md +++ b/cost/flexera/cco/low_service_usage/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.1 + +- Updated description to account for new file path in Github repository + ## v2.0 - Deprecated `auth_rs` authentication (type: `rightscale`) and replaced with `auth_flexera` (type: `oauth2`). This is a breaking change which requires a Credential for `auth_flexera` [`provider=flexera`] before the policy can be applied. Please see docs for setting up [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) diff --git a/cost/low_service_usage/README.md b/cost/flexera/cco/low_service_usage/README.md similarity index 100% rename from cost/low_service_usage/README.md rename to cost/flexera/cco/low_service_usage/README.md diff --git a/cost/low_service_usage/low_service_usage.pt b/cost/flexera/cco/low_service_usage/low_service_usage.pt similarity index 97% rename from cost/low_service_usage/low_service_usage.pt rename to cost/flexera/cco/low_service_usage/low_service_usage.pt index bbbc33650b..cdf131b92c 100644 --- a/cost/low_service_usage/low_service_usage.pt +++ b/cost/flexera/cco/low_service_usage/low_service_usage.pt @@ -1,14 +1,14 @@ name "Low Service Usage" rs_pt_ver 20180301 type "policy" -short_description "Analyze all service usage and determines recommend consolidation or deletion. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/low_service_usage/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Analyze all service usage and determines recommend consolidation or deletion. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/low_service_usage/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "daily" tenancy "single" info( - version: "2.0", + version: "2.1", provider: "Flexera Optima", service: "", policy_set: "" diff --git a/cost/new_service_usage/CHANGELOG.md b/cost/flexera/cco/new_service_usage/CHANGELOG.md similarity index 92% rename from cost/new_service_usage/CHANGELOG.md rename to cost/flexera/cco/new_service_usage/CHANGELOG.md index bd84730f33..542572bda5 100644 --- a/cost/new_service_usage/CHANGELOG.md +++ b/cost/flexera/cco/new_service_usage/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.1 + +- Updated description to account for new file path in Github repository + ## v2.0 - Deprecated `auth_rs` authentication (type: `rightscale`) and replaced with `auth_flexera` (type: `oauth2`). This is a breaking change which requires a Credential for `auth_flexera` [`provider=flexera`] before the policy can be applied. Please see docs for setting up [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) diff --git a/cost/new_service_usage/README.md b/cost/flexera/cco/new_service_usage/README.md similarity index 100% rename from cost/new_service_usage/README.md rename to cost/flexera/cco/new_service_usage/README.md diff --git a/cost/new_service_usage/new_service_usage.pt b/cost/flexera/cco/new_service_usage/new_service_usage.pt similarity index 98% rename from cost/new_service_usage/new_service_usage.pt rename to cost/flexera/cco/new_service_usage/new_service_usage.pt index 62e41041ed..b0ac171512 100644 --- a/cost/new_service_usage/new_service_usage.pt +++ b/cost/flexera/cco/new_service_usage/new_service_usage.pt @@ -1,14 +1,14 @@ name "New Service Usage" rs_pt_ver 20180301 type "policy" -short_description "Analyze bill for new service usage and notify. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/new_service_usage) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Analyze bill for new service usage and notify. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/new_service_usage) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "daily" tenancy "single" info( - version: "2.0", + version: "2.1", provider: "Flexera Optima", service: "", policy_set: "" diff --git a/cost/scheduled_report_markupsdowns/CHANGELOG.md b/cost/flexera/cco/scheduled_report_markupsdowns/CHANGELOG.md similarity index 72% rename from cost/scheduled_report_markupsdowns/CHANGELOG.md rename to cost/flexera/cco/scheduled_report_markupsdowns/CHANGELOG.md index 229423473d..a2a426b568 100644 --- a/cost/scheduled_report_markupsdowns/CHANGELOG.md +++ b/cost/flexera/cco/scheduled_report_markupsdowns/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## v1.5 + +- fixed link to README in policy description + +## v1.4 + +- Updated description to account for new file path in Github repository + ## v1.3 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/cost/scheduled_report_markupsdowns/README.md b/cost/flexera/cco/scheduled_report_markupsdowns/README.md similarity index 100% rename from cost/scheduled_report_markupsdowns/README.md rename to cost/flexera/cco/scheduled_report_markupsdowns/README.md diff --git a/cost/scheduled_report_markupsdowns/scheduled_report_markpsdowns.pt b/cost/flexera/cco/scheduled_report_markupsdowns/scheduled_report_markpsdowns.pt similarity index 98% rename from cost/scheduled_report_markupsdowns/scheduled_report_markpsdowns.pt rename to cost/flexera/cco/scheduled_report_markupsdowns/scheduled_report_markpsdowns.pt index a1f61fdac3..8c8aa215b2 100644 --- a/cost/scheduled_report_markupsdowns/scheduled_report_markpsdowns.pt +++ b/cost/flexera/cco/scheduled_report_markupsdowns/scheduled_report_markpsdowns.pt @@ -1,14 +1,14 @@ name "Scheduled Report with Markups and Markdowns" rs_pt_ver 20180301 type "policy" -short_description "This policy allows you to set up scheduled reports that will provide summaries of cloud cost across all resources in the billing centers with a markup or markdown % for the last month. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/scheduled_report_markupsDowns/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "This policy allows you to set up scheduled reports that will provide summaries of cloud cost across all resources in the billing centers with a markup or markdown % for the last month. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/scheduled_report_markupsdowns/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" tenancy "single" default_frequency "monthly" info( - version: "1.3", + version: "1.5", provider: "Flexera Optima", service: "", policy_set: "", @@ -153,7 +153,7 @@ auth "auth_rs", type: "rightscale" datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/scheduled_reports/CHANGELOG.md b/cost/flexera/cco/scheduled_reports/CHANGELOG.md similarity index 97% rename from cost/scheduled_reports/CHANGELOG.md rename to cost/flexera/cco/scheduled_reports/CHANGELOG.md index 074c7596a1..f288b84de9 100644 --- a/cost/scheduled_reports/CHANGELOG.md +++ b/cost/flexera/cco/scheduled_reports/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- Updated description to account for new file path in Github repository + ## v3.0 - Added ability to specify custom dimensions for the graph in the report diff --git a/cost/scheduled_reports/README.md b/cost/flexera/cco/scheduled_reports/README.md similarity index 100% rename from cost/scheduled_reports/README.md rename to cost/flexera/cco/scheduled_reports/README.md diff --git a/cost/scheduled_reports/currency_reference.json b/cost/flexera/cco/scheduled_reports/currency_reference.json similarity index 100% rename from cost/scheduled_reports/currency_reference.json rename to cost/flexera/cco/scheduled_reports/currency_reference.json diff --git a/cost/scheduled_reports/scheduled_report.pt b/cost/flexera/cco/scheduled_reports/scheduled_report.pt similarity index 98% rename from cost/scheduled_reports/scheduled_report.pt rename to cost/flexera/cco/scheduled_reports/scheduled_report.pt index cac5a5cea5..d5f0163ab6 100644 --- a/cost/scheduled_reports/scheduled_report.pt +++ b/cost/flexera/cco/scheduled_reports/scheduled_report.pt @@ -1,13 +1,13 @@ name "Scheduled Report" rs_pt_ver 20180301 type "policy" -short_description "This policy allows you to configure scheduled reports that will provide summaries of cloud cost. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/scheduled_reports/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "This policy allows you to configure scheduled reports that will provide summaries of cloud cost. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/scheduled_reports/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "monthly" info( - version: "3.0", + version: "3.1", provider: "Flexera", service: "Cloud Cost Optimization", policy_set: "" @@ -300,7 +300,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end @@ -844,7 +844,7 @@ policy "policy_scheduled_report" do **Bill Currency:** {{ data.currencyCode }}\\ ![Spending Overview Chart](https://image-charts.com/chart?{{ data.chartType }}&{{ data.chartSize }}&{{ data.chartTitle }}&{{ data.chartAxis }}&{{ data.chartXAxis }}&{{ data.chartAxisFormat }}&{{ data.chartData }}&{{ data.chartCategories }}&{{ data.chartColors }}&{{ data.chartKeyLocation }}&{{ data.chartExtension }} "Spending Overview Chart") ### For more detailed cost information, see [Dashboards](https://{{ data.domain }}/orgs/{{ rs_org_id }}/optima/dashboards) or [Tabular View](https://{{ data.domain }}/orgs/{{ rs_org_id }}/optima/tabular-view). -For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/scheduled_reports). +For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/scheduled_reports). EOS check eq(val(data, "dataPresent"), 0) escalate $esc_email diff --git a/cost/scheduled_reports_with_estimates/CHANGELOG.md b/cost/flexera/cco/scheduled_reports_with_estimates/CHANGELOG.md similarity index 77% rename from cost/scheduled_reports_with_estimates/CHANGELOG.md rename to cost/flexera/cco/scheduled_reports_with_estimates/CHANGELOG.md index a1836cac80..4d5eb1a0ea 100644 --- a/cost/scheduled_reports_with_estimates/CHANGELOG.md +++ b/cost/flexera/cco/scheduled_reports_with_estimates/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.4 + +- Updated description to account for new file path in Github repository + ## v1.3 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/cost/scheduled_reports_with_estimates/README.md b/cost/flexera/cco/scheduled_reports_with_estimates/README.md similarity index 100% rename from cost/scheduled_reports_with_estimates/README.md rename to cost/flexera/cco/scheduled_reports_with_estimates/README.md diff --git a/cost/scheduled_reports_with_estimates/costs_forecasting.pt b/cost/flexera/cco/scheduled_reports_with_estimates/costs_forecasting.pt similarity index 99% rename from cost/scheduled_reports_with_estimates/costs_forecasting.pt rename to cost/flexera/cco/scheduled_reports_with_estimates/costs_forecasting.pt index 797aba5faa..3ea46643cf 100644 --- a/cost/scheduled_reports_with_estimates/costs_forecasting.pt +++ b/cost/flexera/cco/scheduled_reports_with_estimates/costs_forecasting.pt @@ -13,14 +13,14 @@ We recommend running this policy on a weekly cadence and applying it to your mas _Note 1: The last 3 days of data in the current week or month will contain incomplete data._ _Note 2: The account you apply the policy to is unimportant as Optima metrics are scoped to the Org._ -See [README](https://github.com/flexera-public/policy_templates/tree/master/cost/scheduled_reports_with_estimates) for more details" +See [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/scheduled_reports_with_estimates) for more details" long_description "" severity "low" category "Cost" tenancy "single" default_frequency "monthly" info( - version: "1.3", + version: "1.4", provider: "Flexera Optima", service: "", policy_set: "", @@ -60,7 +60,7 @@ auth "auth_rs", type: "rightscale" datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end @@ -993,7 +993,7 @@ policy "policy_scheduled_report" do The 3 months after the current month of {{ data.currentMonthName }} are estimates based on past cost trends. -For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/scheduled_reports_with_estimates). +For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/scheduled_reports_with_estimates). ___ ###### Policy Applied in Account: {{ rs_project_name }} (Account ID: {{ rs_project_id }}) within Org: {{ rs_org_name }} EOS diff --git a/cost/superseded_instance/CHANGELOG.md b/cost/flexera/cco/superseded_instance/CHANGELOG.md similarity index 95% rename from cost/superseded_instance/CHANGELOG.md rename to cost/flexera/cco/superseded_instance/CHANGELOG.md index aa2db651ef..d2bad7eccf 100644 --- a/cost/superseded_instance/CHANGELOG.md +++ b/cost/flexera/cco/superseded_instance/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.3 + +- Updated description to account for new file path in Github repository + ## v3.2 - Deprecated: This policy is no longer being updated. See README for more information. diff --git a/cost/superseded_instance/README.md b/cost/flexera/cco/superseded_instance/README.md similarity index 100% rename from cost/superseded_instance/README.md rename to cost/flexera/cco/superseded_instance/README.md diff --git a/cost/superseded_instance/superseded_instance.pt b/cost/flexera/cco/superseded_instance/superseded_instance.pt similarity index 98% rename from cost/superseded_instance/superseded_instance.pt rename to cost/flexera/cco/superseded_instance/superseded_instance.pt index 3c744e074f..ac37365c97 100644 --- a/cost/superseded_instance/superseded_instance.pt +++ b/cost/flexera/cco/superseded_instance/superseded_instance.pt @@ -1,14 +1,14 @@ name "Superseded Instances" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** This Policy Template is used to identify instance sizes that have been superseded. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/superseded_instance) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** This Policy Template is used to identify instance sizes that have been superseded. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cco/superseded_instance) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Cost" severity "low" default_frequency "daily" tenancy "single" info( - version: "3.2", + version: "3.3", provider: "Flexera Optima", service: "", policy_set: "" @@ -243,7 +243,7 @@ end datasource "ds_currency_reference" do request do host "raw.githubusercontent.com" - path "/rightscale/policy_templates/master/cost/scheduled_reports/currency_reference.json" + path "/rightscale/policy_templates/master/cost/flexera/cco/scheduled_reports/currency_reference.json" header "User-Agent", "RS Policies" end end diff --git a/cost/downsize_instance/CHANGELOG.md b/cost/flexera/cmp/downsize_instance/CHANGELOG.md similarity index 95% rename from cost/downsize_instance/CHANGELOG.md rename to cost/flexera/cmp/downsize_instance/CHANGELOG.md index 9ec0b486a0..17c776a4dd 100644 --- a/cost/downsize_instance/CHANGELOG.md +++ b/cost/flexera/cmp/downsize_instance/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.22 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.21 - Deprecated: This policy is no longer being updated. diff --git a/cost/downsize_instance/README.md b/cost/flexera/cmp/downsize_instance/README.md similarity index 100% rename from cost/downsize_instance/README.md rename to cost/flexera/cmp/downsize_instance/README.md diff --git a/cost/downsize_instance/downsize_instance.pt b/cost/flexera/cmp/downsize_instance/downsize_instance.pt similarity index 99% rename from cost/downsize_instance/downsize_instance.pt rename to cost/flexera/cmp/downsize_instance/downsize_instance.pt index aee8dba5a6..5040f7f974 100644 --- a/cost/downsize_instance/downsize_instance.pt +++ b/cost/flexera/cmp/downsize_instance/downsize_instance.pt @@ -1,16 +1,17 @@ name "Downsize Instances" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that downsizes instances. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/downsize_instance) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** A policy that downsizes instances. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/downsize_instance) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" default_frequency "daily" info( - version: "1.21", + version: "1.22", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/cost/downsize_instance/instance_types.json b/cost/flexera/cmp/downsize_instance/instance_types.json similarity index 100% rename from cost/downsize_instance/instance_types.json rename to cost/flexera/cmp/downsize_instance/instance_types.json diff --git a/cost/instance_anomaly/CHANGELOG.md b/cost/flexera/cmp/instance_anomaly/CHANGELOG.md similarity index 86% rename from cost/instance_anomaly/CHANGELOG.md rename to cost/flexera/cmp/instance_anomaly/CHANGELOG.md index 00789a8d23..d32452162e 100644 --- a/cost/instance_anomaly/CHANGELOG.md +++ b/cost/flexera/cmp/instance_anomaly/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.9 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.8 - Deprecated: This policy is no longer being updated. diff --git a/cost/instance_anomaly/README.md b/cost/flexera/cmp/instance_anomaly/README.md similarity index 100% rename from cost/instance_anomaly/README.md rename to cost/flexera/cmp/instance_anomaly/README.md diff --git a/cost/instance_anomaly/instance_anomaly.pt b/cost/flexera/cmp/instance_anomaly/instance_anomaly.pt similarity index 96% rename from cost/instance_anomaly/instance_anomaly.pt rename to cost/flexera/cmp/instance_anomaly/instance_anomaly.pt index bad3172437..9fbec517f2 100644 --- a/cost/instance_anomaly/instance_anomaly.pt +++ b/cost/flexera/cmp/instance_anomaly/instance_anomaly.pt @@ -1,16 +1,17 @@ name "Running Instance Count Anomaly" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Report when the percentage of running instances increases or decreases beyond a specified threshold.\n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/instance_anomaly) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Report when the percentage of running instances increases or decreases beyond a specified threshold.\n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/instance_anomaly) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" default_frequency "daily" info( - version: "1.8", + version: "1.9", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/cost/volumes/old_snapshots/CHANGELOG.md b/cost/flexera/cmp/old_snapshots/CHANGELOG.md similarity index 92% rename from cost/volumes/old_snapshots/CHANGELOG.md rename to cost/flexera/cmp/old_snapshots/CHANGELOG.md index d4ad8d44cd..dea8b032c7 100644 --- a/cost/volumes/old_snapshots/CHANGELOG.md +++ b/cost/flexera/cmp/old_snapshots/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.17 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.16 - Deprecated: This policy is no longer being updated. diff --git a/cost/volumes/old_snapshots/README.md b/cost/flexera/cmp/old_snapshots/README.md similarity index 100% rename from cost/volumes/old_snapshots/README.md rename to cost/flexera/cmp/old_snapshots/README.md diff --git a/cost/volumes/old_snapshots/old_snapshot.pt b/cost/flexera/cmp/old_snapshots/old_snapshot.pt similarity index 96% rename from cost/volumes/old_snapshots/old_snapshot.pt rename to cost/flexera/cmp/old_snapshots/old_snapshot.pt index 07d78067d4..e6128fc7b9 100644 --- a/cost/volumes/old_snapshots/old_snapshot.pt +++ b/cost/flexera/cmp/old_snapshots/old_snapshot.pt @@ -1,16 +1,17 @@ name "Discover Old Snapshots" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email and requests deletion when snapshots older then a certain timeframe are found. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/volumes/old_snapshots) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email and requests deletion when snapshots older then a certain timeframe are found. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/old_snapshots) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Cost" default_frequency "daily" info( - version: "1.16", + version: "1.17", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "perm_snapshots" do diff --git a/cost/rightlink_rightsize/CHANGELOG.md b/cost/flexera/cmp/rightlink_rightsize/CHANGELOG.md similarity index 95% rename from cost/rightlink_rightsize/CHANGELOG.md rename to cost/flexera/cmp/rightlink_rightsize/CHANGELOG.md index ed093b061a..f073ad0199 100644 --- a/cost/rightlink_rightsize/CHANGELOG.md +++ b/cost/flexera/cmp/rightlink_rightsize/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.20 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.19 - Deprecated: This policy is no longer being updated. diff --git a/cost/rightlink_rightsize/README.md b/cost/flexera/cmp/rightlink_rightsize/README.md similarity index 100% rename from cost/rightlink_rightsize/README.md rename to cost/flexera/cmp/rightlink_rightsize/README.md diff --git a/cost/rightlink_rightsize/rightlink-rightsize-add-tags.pt b/cost/flexera/cmp/rightlink_rightsize/rightlink-rightsize-add-tags.pt similarity index 97% rename from cost/rightlink_rightsize/rightlink-rightsize-add-tags.pt rename to cost/flexera/cmp/rightlink_rightsize/rightlink-rightsize-add-tags.pt index d8e6a63f3a..1c3d185137 100644 --- a/cost/rightlink_rightsize/rightlink-rightsize-add-tags.pt +++ b/cost/flexera/cmp/rightlink_rightsize/rightlink-rightsize-add-tags.pt @@ -4,17 +4,18 @@ type "policy" short_description "Deprecated: This policy is no longer being update.\n A policy that checks cooldown time tag that the Instance Utilization policy sets and if time has expired, it will add back the tag to allow the instance to be resized. \n See the -[README](https://github.com/flexera-public/policy_templates/tree/master/cost/rightlink_rightsize) +[README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/rightlink_rightsize) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" info( - version: "1.6", + version: "1.7", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "perm_instances" do diff --git a/cost/rightlink_rightsize/rightlink_rightsize.pt b/cost/flexera/cmp/rightlink_rightsize/rightlink_rightsize.pt similarity index 98% rename from cost/rightlink_rightsize/rightlink_rightsize.pt rename to cost/flexera/cmp/rightlink_rightsize/rightlink_rightsize.pt index cb2bef89f0..0bb9f88547 100644 --- a/cost/rightlink_rightsize/rightlink_rightsize.pt +++ b/cost/flexera/cmp/rightlink_rightsize/rightlink_rightsize.pt @@ -1,16 +1,17 @@ name "Inefficient Instance Utilization using RightLink" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** This checks inefficient instance utilization using the provided CPU and Memory thresholds. Instances matching the criteria can be resized after user approval. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/rightlink_rightsize) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** This checks inefficient instance utilization using the provided CPU and Memory thresholds. Instances matching the criteria can be resized after user approval. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/rightlink_rightsize) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" default_frequency "daily" info( - version: "1.19", + version: "1.20", provider: "Flexera Cloud Management", service: "", - policy_set: "Inefficient Instance Usage" + policy_set: "Inefficient Instance Usage", + publish: "false" ) permission "perm_instances" do diff --git a/cost/schedule_instances/CHANGELOG.md b/cost/flexera/cmp/schedule_instances/CHANGELOG.md similarity index 87% rename from cost/schedule_instances/CHANGELOG.md rename to cost/flexera/cmp/schedule_instances/CHANGELOG.md index 58d4f6e540..b301b55be8 100644 --- a/cost/schedule_instances/CHANGELOG.md +++ b/cost/flexera/cmp/schedule_instances/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.13 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.12 - Deprecated: This policy is no longer being updated. diff --git a/cost/schedule_instances/README.md b/cost/flexera/cmp/schedule_instances/README.md similarity index 100% rename from cost/schedule_instances/README.md rename to cost/flexera/cmp/schedule_instances/README.md diff --git a/cost/schedule_instances/schedule_instances.pt b/cost/flexera/cmp/schedule_instances/schedule_instances.pt similarity index 98% rename from cost/schedule_instances/schedule_instances.pt rename to cost/flexera/cmp/schedule_instances/schedule_instances.pt index e0e5f674a6..0774c3428e 100644 --- a/cost/schedule_instances/schedule_instances.pt +++ b/cost/flexera/cmp/schedule_instances/schedule_instances.pt @@ -1,16 +1,17 @@ name "Schedule Instances" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that start and stops instances based on a schedule. \n See [README](https://github.com/flexera-public/policy_templates/tree/master/cost/schedule_instances) for more details" +short_description "**Deprecated: This policy is no longer being updated.** A policy that start and stops instances based on a schedule. \n See [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/schedule_instances) for more details" long_description "" severity "medium" category "Cost" default_frequency "daily" info( - version: "1.12", + version: "1.13", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) parameter "param_email" do diff --git a/cost/superseded_instance_remediation/CHANGELOG.md b/cost/flexera/cmp/superseded_instance_remediation/CHANGELOG.md similarity index 82% rename from cost/superseded_instance_remediation/CHANGELOG.md rename to cost/flexera/cmp/superseded_instance_remediation/CHANGELOG.md index a54f9f1d45..df02f458db 100644 --- a/cost/superseded_instance_remediation/CHANGELOG.md +++ b/cost/flexera/cmp/superseded_instance_remediation/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.7 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.6 - Deprecated: This policy is no longer being updated. diff --git a/cost/superseded_instance_remediation/README.md b/cost/flexera/cmp/superseded_instance_remediation/README.md similarity index 100% rename from cost/superseded_instance_remediation/README.md rename to cost/flexera/cmp/superseded_instance_remediation/README.md diff --git a/cost/superseded_instance_remediation/superseded_instance_remediation.pt b/cost/flexera/cmp/superseded_instance_remediation/superseded_instance_remediation.pt similarity index 98% rename from cost/superseded_instance_remediation/superseded_instance_remediation.pt rename to cost/flexera/cmp/superseded_instance_remediation/superseded_instance_remediation.pt index 9e444a79df..efb257be56 100644 --- a/cost/superseded_instance_remediation/superseded_instance_remediation.pt +++ b/cost/flexera/cmp/superseded_instance_remediation/superseded_instance_remediation.pt @@ -1,17 +1,18 @@ name "Superseded Instance Remediation" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** This Policy Template is used to automatically supersede instances based on user-defined standards. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/superseded_instance_remediation/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** This Policy Template is used to automatically supersede instances based on user-defined standards. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/superseded_instance_remediation/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Cost" severity "low" default_frequency "daily" tenancy "single" info( - version: "1.6", + version: "1.7", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### @@ -359,4 +360,3 @@ define skip_error_and_append($subject) do $$errors << "Unexpected error for " + $subject + "\n " + to_s($_error) $_error_behavior = "skip" end - diff --git a/cost/terminate_policy/CHANGELOG.md b/cost/flexera/cmp/terminate_policy/CHANGELOG.md similarity index 86% rename from cost/terminate_policy/CHANGELOG.md rename to cost/flexera/cmp/terminate_policy/CHANGELOG.md index 1cd4021ec0..9f5d9501bc 100644 --- a/cost/terminate_policy/CHANGELOG.md +++ b/cost/flexera/cmp/terminate_policy/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.10 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.9 - Deprecated: This policy is no longer being updated. diff --git a/cost/terminate_policy/README.md b/cost/flexera/cmp/terminate_policy/README.md similarity index 100% rename from cost/terminate_policy/README.md rename to cost/flexera/cmp/terminate_policy/README.md diff --git a/cost/terminate_policy/instance_terminate.pt b/cost/flexera/cmp/terminate_policy/instance_terminate.pt similarity index 96% rename from cost/terminate_policy/instance_terminate.pt rename to cost/flexera/cmp/terminate_policy/instance_terminate.pt index 452c7396a6..ae16b4887a 100644 --- a/cost/terminate_policy/instance_terminate.pt +++ b/cost/flexera/cmp/terminate_policy/instance_terminate.pt @@ -1,16 +1,17 @@ name "Terminate Instances with End Date" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** This Policy Template is used to terminate instances based on tag. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/terminate_policy/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** This Policy Template is used to terminate instances based on tag. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/terminate_policy/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Cost" severity "low" default_frequency "daily" info( - version: "1.9", + version: "1.10", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### @@ -248,4 +249,3 @@ define terminate_instances($data) do end end end - diff --git a/cost/unattached_addresses/CHANGELOG.md b/cost/flexera/cmp/unattached_addresses/CHANGELOG.md similarity index 85% rename from cost/unattached_addresses/CHANGELOG.md rename to cost/flexera/cmp/unattached_addresses/CHANGELOG.md index 02d9b6f926..740a167e78 100644 --- a/cost/unattached_addresses/CHANGELOG.md +++ b/cost/flexera/cmp/unattached_addresses/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.10 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.9 - Deprecated: This policy is no longer being updated. diff --git a/cost/unattached_addresses/README.md b/cost/flexera/cmp/unattached_addresses/README.md similarity index 100% rename from cost/unattached_addresses/README.md rename to cost/flexera/cmp/unattached_addresses/README.md diff --git a/cost/unattached_addresses/unattached_addresses.pt b/cost/flexera/cmp/unattached_addresses/unattached_addresses.pt similarity index 95% rename from cost/unattached_addresses/unattached_addresses.pt rename to cost/flexera/cmp/unattached_addresses/unattached_addresses.pt index 637fe12681..5a338ad2b6 100644 --- a/cost/unattached_addresses/unattached_addresses.pt +++ b/cost/flexera/cmp/unattached_addresses/unattached_addresses.pt @@ -1,16 +1,17 @@ name "Unattached IP Addresses" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Checks Unutilized IP Addresses and deletes them with approval. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/unattached_addresses) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Checks Unutilized IP Addresses and deletes them with approval. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/unattached_addresses) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "daily" info( - version: "1.9", + version: "1.10", provider: "Flexera Cloud Management", service: "", - policy_set: "Unused IP Addresses" + policy_set: "Unused IP Addresses", + publish: "false" ) permission "perm_read__ip_addresses" do diff --git a/cost/volumes/unattached_volumes/CHANGELOG.md b/cost/flexera/cmp/unattached_volumes/CHANGELOG.md similarity index 94% rename from cost/volumes/unattached_volumes/CHANGELOG.md rename to cost/flexera/cmp/unattached_volumes/CHANGELOG.md index 8c45d62e0d..5fe6313b34 100644 --- a/cost/volumes/unattached_volumes/CHANGELOG.md +++ b/cost/flexera/cmp/unattached_volumes/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.18 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.17 - Deprecated: This policy is no longer being updated. diff --git a/cost/volumes/unattached_volumes/README.md b/cost/flexera/cmp/unattached_volumes/README.md similarity index 100% rename from cost/volumes/unattached_volumes/README.md rename to cost/flexera/cmp/unattached_volumes/README.md diff --git a/cost/volumes/unattached_volumes/uav_policy.pt b/cost/flexera/cmp/unattached_volumes/uav_policy.pt similarity index 98% rename from cost/volumes/unattached_volumes/uav_policy.pt rename to cost/flexera/cmp/unattached_volumes/uav_policy.pt index 017e1adcb4..5b1019f284 100644 --- a/cost/volumes/unattached_volumes/uav_policy.pt +++ b/cost/flexera/cmp/unattached_volumes/uav_policy.pt @@ -1,16 +1,17 @@ name "Unattached Volumes" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Checks for unattached volumes older than specified number of days and, optionally, deletes them. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/volumes/unattached_volumes) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Checks for unattached volumes older than specified number of days and, optionally, deletes them. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/cmp/unattached_volumes) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Cost" default_frequency "daily" info( - version: "1.17", + version: "1.18", provider: "Flexera Cloud Management", service: "", - policy_set: "Unattached Volumes" + policy_set: "Unattached Volumes", + publish: "false" ) ############################################################################### diff --git a/msp/cost/master_org_cost_policy/CHANGELOG.md b/cost/flexera/msp/master_org_cost_policy/CHANGELOG.md similarity index 82% rename from msp/cost/master_org_cost_policy/CHANGELOG.md rename to cost/flexera/msp/master_org_cost_policy/CHANGELOG.md index 749c73e30e..4293286eb0 100644 --- a/msp/cost/master_org_cost_policy/CHANGELOG.md +++ b/cost/flexera/msp/master_org_cost_policy/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.5 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.4 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/msp/cost/master_org_cost_policy/README.md b/cost/flexera/msp/master_org_cost_policy/README.md similarity index 100% rename from msp/cost/master_org_cost_policy/README.md rename to cost/flexera/msp/master_org_cost_policy/README.md diff --git a/msp/cost/master_org_cost_policy/master_org_cost_policy.pt b/cost/flexera/msp/master_org_cost_policy/master_org_cost_policy.pt similarity index 99% rename from msp/cost/master_org_cost_policy/master_org_cost_policy.pt rename to cost/flexera/msp/master_org_cost_policy/master_org_cost_policy.pt index 9db641b03b..9d31d668f3 100644 --- a/msp/cost/master_org_cost_policy/master_org_cost_policy.pt +++ b/cost/flexera/msp/master_org_cost_policy/master_org_cost_policy.pt @@ -10,15 +10,16 @@ We recommend running this policy on a weekly cadence and applying it to your mas _Note 1: The last 3 days of data in the current week or month will contain incomplete data._ _Note 2: The account you apply the policy to is unimportant as Optima metrics are scoped to the Org._ _Note 3: If excluding orgs is needed use only either 'Excluded Organizations' or 'Exclucded organizations IDs' parameter, not both._ -See [README](https://github.com/flexera-public/policy_templates/tree/master/msp/cost/master_org_cost_policy) for more details" +See [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/msp/master_org_cost_policy) for more details" long_description "Version: 1.4" severity "low" category "Cost" info( - version: "1.4", + version: "1.5", provider: "Flexera Optima", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/msp/cost/master_org_cost_policy_currency/CHANGELOG.md b/cost/flexera/msp/master_org_cost_policy_currency/CHANGELOG.md similarity index 78% rename from msp/cost/master_org_cost_policy_currency/CHANGELOG.md rename to cost/flexera/msp/master_org_cost_policy_currency/CHANGELOG.md index 6bd53be00e..1b2656ccc0 100644 --- a/msp/cost/master_org_cost_policy_currency/CHANGELOG.md +++ b/cost/flexera/msp/master_org_cost_policy_currency/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.3 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.2 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/msp/cost/master_org_cost_policy_currency/README.md b/cost/flexera/msp/master_org_cost_policy_currency/README.md similarity index 100% rename from msp/cost/master_org_cost_policy_currency/README.md rename to cost/flexera/msp/master_org_cost_policy_currency/README.md diff --git a/msp/cost/master_org_cost_policy_currency/master_org_cost_policy_currency.pt b/cost/flexera/msp/master_org_cost_policy_currency/master_org_cost_policy_currency.pt similarity index 99% rename from msp/cost/master_org_cost_policy_currency/master_org_cost_policy_currency.pt rename to cost/flexera/msp/master_org_cost_policy_currency/master_org_cost_policy_currency.pt index c20fabc517..c6753ffaf6 100644 --- a/msp/cost/master_org_cost_policy_currency/master_org_cost_policy_currency.pt +++ b/cost/flexera/msp/master_org_cost_policy_currency/master_org_cost_policy_currency.pt @@ -10,16 +10,17 @@ We recommend running this policy on a weekly cadence and applying it to your mas _Note 1: The last 3 days of data in the current week or month will contain incomplete data._ _Note 2: The account you apply the policy to is unimportant as Optima metrics are scoped to the Org._ _Note 3: Exchange rates are calculated at execution time using [https://exchangeratesapi.io/](https://exchangeratesapi.io/)._ -See [README](https://github.com/flexera-public/policy_templates/tree/master/msp/cost/master_org_cost_policy_currency) for more details" +See [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/msp/master_org_cost_policy_currency) for more details" long_description "" severity "low" category "Cost" tenancy "single" info( - version: "1.2", + version: "1.3", provider: "Flexera Optima", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### @@ -998,7 +999,7 @@ policy "policy_scheduled_report" do ### Currency Converted to: {{ parameters.param_final_currency }}* ![Spending Overview Chart](https://image-charts.com/chart?{{ data.chartType }}&{{ data.chartSize }}&{{ data.chartTitle }}&{{ data.chartAxis }}&{{ data.chartXAxis }}&{{ data.chartAxisFormat }}&{{ data.chartData }}&{{ data.chartCategories }}&{{ data.chartColors }}&{{ data.chartKeyLocation }}&{{ data.chartExtension }} "Spending Overview Chart") ### For more detailed cost information, visit [Optima](https://analytics.rightscale.com/orgs/{{ rs_org_id }}/dashboard). - For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/msp/cost/master_org_cost_policy_currency).
+ For more information on this report, please view the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/flexera/msp/master_org_cost_policy_currency).
*Exchange rates are calculated at execution time from [https://exchangeratesapi.io/](https://exchangeratesapi.io/) ___ ###### Policy Applied in Account: {{ rs_project_name }} (Account ID: {{ rs_project_id }}) within Org: {{ rs_org_name }} (Org ID: {{ rs_org_id }}) diff --git a/cost/google/cloud_run_anomaly_detection/CHANGELOG.md b/cost/google/cloud_run_anomaly_detection/CHANGELOG.md index a1ed544621..897565ef5b 100644 --- a/cost/google/cloud_run_anomaly_detection/CHANGELOG.md +++ b/cost/google/cloud_run_anomaly_detection/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v0.1.1 + +- fixed link to README in policy description + ## v0.1.0 - Initial release diff --git a/cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt b/cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt index 7a84753da8..bfeaa73ace 100644 --- a/cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt +++ b/cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt @@ -1,14 +1,14 @@ name "Google Cloud Run Anomaly Detection" rs_pt_ver 20180301 type "policy" -short_description "Identifies Anomalies in Google Cloud Run Services" +short_description "Identifies Anomalies in Google Cloud Run Services. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/google/cloud_run_anomaly_detection) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "daily" info( publish: "false", - version: "0.1.0", + version: "0.1.1", provider: "Google", service: "Cloud Run", policy_set: "Anomaly Detection" diff --git a/cost/turbonomics/allocate_virtual_machines_recommendations/gcp/CHANGELOG.md b/cost/turbonomics/allocate_virtual_machines_recommendations/google/CHANGELOG.md similarity index 100% rename from cost/turbonomics/allocate_virtual_machines_recommendations/gcp/CHANGELOG.md rename to cost/turbonomics/allocate_virtual_machines_recommendations/google/CHANGELOG.md diff --git a/cost/turbonomics/allocate_virtual_machines_recommendations/gcp/README.md b/cost/turbonomics/allocate_virtual_machines_recommendations/google/README.md similarity index 100% rename from cost/turbonomics/allocate_virtual_machines_recommendations/gcp/README.md rename to cost/turbonomics/allocate_virtual_machines_recommendations/google/README.md diff --git a/cost/turbonomics/allocate_virtual_machines_recommendations/gcp/turbonomics_allocate_virtual_machines.pt b/cost/turbonomics/allocate_virtual_machines_recommendations/google/turbonomics_allocate_virtual_machines.pt similarity index 100% rename from cost/turbonomics/allocate_virtual_machines_recommendations/gcp/turbonomics_allocate_virtual_machines.pt rename to cost/turbonomics/allocate_virtual_machines_recommendations/google/turbonomics_allocate_virtual_machines.pt diff --git a/cost/turbonomics/credential_refresh/CHANGELOG.md b/cost/turbonomics/credential_refresh/CHANGELOG.md index 5b2bea7804..1319e4e710 100644 --- a/cost/turbonomics/credential_refresh/CHANGELOG.md +++ b/cost/turbonomics/credential_refresh/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v0.4 + +- fixed link to README in policy description + ## v0.3 - Bug fix: Previously this policy could only update applied policies (policies added using the Automation > Templates panel) but no aggregated policies like those executed from the Automation > Catalog, now this was fixed and the policy can work with both. diff --git a/cost/turbonomics/credential_refresh/turbonomic_cred_refresh.pt b/cost/turbonomics/credential_refresh/turbonomic_cred_refresh.pt index 5d759d5ee6..459db6a478 100644 --- a/cost/turbonomics/credential_refresh/turbonomic_cred_refresh.pt +++ b/cost/turbonomics/credential_refresh/turbonomic_cred_refresh.pt @@ -1,12 +1,12 @@ name "Turbonomic Credential Refresh" rs_pt_ver 20180301 type "policy" -short_description "A policy that refreshes the cookie used to authenticate with Turbonomic APIs" +short_description "A policy that refreshes the cookie used to authenticate with Turbonomic APIs. See the [README](https://github.com/flexera-public/policy_templates/tree/master/cost/turbonomics/credential_refresh) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." severity "low" category "Operational" default_frequency "hourly" info( - version: "0.3", + version: "0.4", provider: "", service: "", policy_set: "", diff --git a/cost/turbonomics/delete_unattached_volumes/gcp/CHANGELOG.md b/cost/turbonomics/delete_unattached_volumes/google/CHANGELOG.md similarity index 100% rename from cost/turbonomics/delete_unattached_volumes/gcp/CHANGELOG.md rename to cost/turbonomics/delete_unattached_volumes/google/CHANGELOG.md diff --git a/cost/turbonomics/delete_unattached_volumes/gcp/README.md b/cost/turbonomics/delete_unattached_volumes/google/README.md similarity index 100% rename from cost/turbonomics/delete_unattached_volumes/gcp/README.md rename to cost/turbonomics/delete_unattached_volumes/google/README.md diff --git a/cost/turbonomics/delete_unattached_volumes/gcp/turbonomics_delete_virtual_volumes.pt b/cost/turbonomics/delete_unattached_volumes/google/turbonomics_delete_virtual_volumes.pt similarity index 100% rename from cost/turbonomics/delete_unattached_volumes/gcp/turbonomics_delete_virtual_volumes.pt rename to cost/turbonomics/delete_unattached_volumes/google/turbonomics_delete_virtual_volumes.pt diff --git a/cost/turbonomics/rightsize_databases_recommendations/gcp/CHANGELOG.md b/cost/turbonomics/rightsize_databases_recommendations/google/CHANGELOG.md similarity index 100% rename from cost/turbonomics/rightsize_databases_recommendations/gcp/CHANGELOG.md rename to cost/turbonomics/rightsize_databases_recommendations/google/CHANGELOG.md diff --git a/cost/turbonomics/rightsize_databases_recommendations/gcp/README.md b/cost/turbonomics/rightsize_databases_recommendations/google/README.md similarity index 100% rename from cost/turbonomics/rightsize_databases_recommendations/gcp/README.md rename to cost/turbonomics/rightsize_databases_recommendations/google/README.md diff --git a/cost/turbonomics/rightsize_databases_recommendations/gcp/turbonomics_rightsize_databases_recommendations.pt b/cost/turbonomics/rightsize_databases_recommendations/google/turbonomics_rightsize_databases_recommendations.pt similarity index 100% rename from cost/turbonomics/rightsize_databases_recommendations/gcp/turbonomics_rightsize_databases_recommendations.pt rename to cost/turbonomics/rightsize_databases_recommendations/google/turbonomics_rightsize_databases_recommendations.pt diff --git a/cost/turbonomics/rightsize_virtual_volumes_recommendations/gcp/CHANGELOG.md b/cost/turbonomics/rightsize_virtual_volumes_recommendations/google/CHANGELOG.md similarity index 100% rename from cost/turbonomics/rightsize_virtual_volumes_recommendations/gcp/CHANGELOG.md rename to cost/turbonomics/rightsize_virtual_volumes_recommendations/google/CHANGELOG.md diff --git a/cost/turbonomics/rightsize_virtual_volumes_recommendations/gcp/README.md b/cost/turbonomics/rightsize_virtual_volumes_recommendations/google/README.md similarity index 100% rename from cost/turbonomics/rightsize_virtual_volumes_recommendations/gcp/README.md rename to cost/turbonomics/rightsize_virtual_volumes_recommendations/google/README.md diff --git a/cost/turbonomics/rightsize_virtual_volumes_recommendations/gcp/turbonomics_rightsize_virtual_volumes_recommendations.pt b/cost/turbonomics/rightsize_virtual_volumes_recommendations/google/turbonomics_rightsize_virtual_volumes_recommendations.pt similarity index 100% rename from cost/turbonomics/rightsize_virtual_volumes_recommendations/gcp/turbonomics_rightsize_virtual_volumes_recommendations.pt rename to cost/turbonomics/rightsize_virtual_volumes_recommendations/google/turbonomics_rightsize_virtual_volumes_recommendations.pt diff --git a/cost/turbonomics/scale_virtual_machines_recommendations/gcp/CHANGELOG.md b/cost/turbonomics/scale_virtual_machines_recommendations/google/CHANGELOG.md similarity index 100% rename from cost/turbonomics/scale_virtual_machines_recommendations/gcp/CHANGELOG.md rename to cost/turbonomics/scale_virtual_machines_recommendations/google/CHANGELOG.md diff --git a/cost/turbonomics/scale_virtual_machines_recommendations/gcp/README.md b/cost/turbonomics/scale_virtual_machines_recommendations/google/README.md similarity index 100% rename from cost/turbonomics/scale_virtual_machines_recommendations/gcp/README.md rename to cost/turbonomics/scale_virtual_machines_recommendations/google/README.md diff --git a/cost/turbonomics/scale_virtual_machines_recommendations/gcp/turbonomics_scale_virtual_machines.pt b/cost/turbonomics/scale_virtual_machines_recommendations/google/turbonomics_scale_virtual_machines.pt similarity index 100% rename from cost/turbonomics/scale_virtual_machines_recommendations/gcp/turbonomics_scale_virtual_machines.pt rename to cost/turbonomics/scale_virtual_machines_recommendations/google/turbonomics_scale_virtual_machines.pt diff --git a/cost/volumes/test_code/hash_dump_tester.pt b/cost/volumes/test_code/hash_dump_tester.pt deleted file mode 100644 index 9ee30a0390..0000000000 --- a/cost/volumes/test_code/hash_dump_tester.pt +++ /dev/null @@ -1,129 +0,0 @@ -name "Hash Dumps" -rs_pt_ver 20180301 -short_description "Dumps hashs and the like" -severity "medium" -category "Cost" -info( - publish: "false", - version: "1.1", - provider: "Test", - service: "", - policy_set: "" -) - -parameter "param_email" do - type "string" - label "Email address to send escalation emails to" -end - -parameter "param_days_old" do - type "number" - label "Identify volumes that have been unattached for the given number of days." - default 30 -end - -resources "clouds", type: "rs_cm.clouds" do - filter do - #cloud_type ne: ["soft_layer", "cloud_stack", "rackspace_next_gen", "blue_skies","open_stack_v2","uca","open_stack_v3"] - cloud_type ne: ["amazon", "google", "soft_layer", "cloud_stack", "rackspace_next_gen", "blue_skies","open_stack_v2","uca","open_stack_v3"] - end -end - -datasource "ds_clouds" do - iterate @clouds - field "href", href(iter_item) - field "cloud_type", val(iter_item, "cloud_type") -end - -resources "pgs", type: "rs_cm.placement_groups" do - view "extended" -end - -datasource "ds_pgs" do - iterate @pgs - field "id", val(iter_item, "resource_uid") - field "name", val(iter_item, "name") - field "account_type", val(val(iter_item, "cloud_specific_attributes"), "account_type") -end - -resources "volumes", type: "rs_cm.volumes" do - iterate @clouds - cloud_href href(iter_item) - view "extended" -end - -# Processing volumes in javascript since extended view does not always have a placement_group or volume_type hash in the -# results and datasource declaration doesn't like that. - -# script-based datasource that applies the logic to return only unattached volumes -datasource "ds_unattached_volumes" do - run_script $js_unattached_volumes, $ds_clouds, $ds_pgs, @volumes -end - -# Find unattached volumes and also calculate their age. -# The age calculation is used to find old ones later on and also to inform the user of the ages of flagged volumes. -script "js_unattached_volumes", type: "javascript" do - parameters "ds_clouds", "ds_pgs", "volumes" - result "unattached_volumes" - code <<-EOS -// This is the list of unattached volumes. -var unattached_volumes = []; - -// Used for date math below -// The number of milliseconds in one day -var ONE_DAY = 1000 * 60 * 60 * 24 -var today = new Date() -// Get today in epoch time in UTC time -var today_ms = new Date(today.getTime() + today.getTimezoneOffset() * 60000); - -// Used for volume type discovery below -// Build a cloud href -> type hash -var cloud_hash = {} -for (var i = 0; i < ds_clouds.length; i++) { - var ds_cloud = ds_clouds[i] - var cloud_href = ds_cloud["href"] - var cloud_type = ds_cloud["cloud_type"] - cloud_hash[cloud_href] = cloud_type -} - -// Build a pg hash that is pg resource id -> { pg type, pg name } -var pg_hash = {} -for (var i = 0; i < ds_pgs.length; i++) { - var ds_pg = ds_pgs[i] - var pg_id = ds_pg["id"] - var pg_name = ds_pg["name"] - var pg_account_type = "unspecified" - if (ds_pg["account_type"]) { - pg_account_type = ds_pg["account_type"] - } - pg_hash[pg_id] = { "name": pg_name, "account_type": pg_account_type } -} - -unattached_volumes.push({ "cloud_hash": JSON.stringify(cloud_hash), "pg_hash": JSON.stringify(pg_hash), "volumes": JSON.stringify(volumes)}) - -EOS -end - -policy "pol_unattached_volumes" do - validate_each $ds_unattached_volumes do - # Go through the unattached volumes that were found by the script-based datasource above - # and check if not older than specified number of days. - # If the check fails, it'll flag the volume - #check le(val(item, "age"), $param_days_old) - check eq(0,1) - - #escalate $esc_unattached_volumes - - summary_template "Hash Dumps" - - detail_template <<-EOS -Unattached Volume Report for Account: {{ rs_project_name }} (ID: {{ rs_project_id }}) -The following unattached volumes have exceeded the specified age of: {{ parameters.param_days_old }} days old -{{ range data }} -cloud hash: {{ .cloud_hash}} -pg hash: {{ .pg_hash}} -volumes: {{ .volumes}} -{{ end }} -EOS - end -end diff --git a/cost/volumes/test_code/javascript_object_testing.js b/cost/volumes/test_code/javascript_object_testing.js deleted file mode 100644 index 0db9453b02..0000000000 --- a/cost/volumes/test_code/javascript_object_testing.js +++ /dev/null @@ -1,22 +0,0 @@ -var test_obj = [ - { - a: "1", - b: { "x" : "alpha", "y": "beta" } - }, - { - a: "11", - c: "goo" - }, -]; -console.log(JSON.stringify(test_obj)); - -for (var i = 0; i < test_obj.length; i++) { - //if (typeof test_obj[i]["b"] == "object") { - if (test_obj[i]["b"]) { - console.log("Found b; index: "+i) - } else if (test_obj[i]["c"]) { - console.log("Found c; index: "+i) - } else { - console.log("Found nothing; index: "+i) - } -} diff --git a/cost/volumes/test_code/uav_creator.pt b/cost/volumes/test_code/uav_creator.pt deleted file mode 100644 index 90afc058f4..0000000000 --- a/cost/volumes/test_code/uav_creator.pt +++ /dev/null @@ -1,276 +0,0 @@ -# Used to create a variety of unattached volumes - -name "Create Unattached Volumes for Testing Purposes" -rs_pt_ver 20180301 -short_description "Creates a variety of unattached volumes in multiple clouds. Used for testing." -severity "medium" -category "Cost" -info( - publish: "false", - version: "1.1", - provider: "Test", - service: "", - policy_set: "" -) - -permission "general_permissions" do - resources "rs_cm.volumes", "rs_cm.audit_entries", "rs_cm.placement_groups", "rs_cm.clouds", "rs_cm.tags", "rs_cm.deployments" - actions "rs_cm.*" -end - -resources "clouds", type: "rs_cm.clouds" do - filter do - cloud_type ne: ["soft_layer", "cloud_stack", "rackspace_next_gen", "blue_skies","open_stack_v2","uca","open_stack_v3"] - end -end - -datasource "ds_clouds" do - iterate @clouds - field "href", href(iter_item) - field "cloud_type", val(iter_item, "cloud_type") - field "name", val(iter_item,'name') -end - -resources "pgs", type: "rs_cm.placement_groups" do - view "extended" -end - -datasource "ds_pgs" do - iterate @pgs - field "id", val(iter_item, "resource_uid") - field "name", val(iter_item, "name") - field "account_type", val(val(iter_item, "cloud_specific_attributes"), "account_type") -end - - -## script-based datasource that applies the logic to return only unattached volumes -#datasource "ds_unattached_volumes" do -# run_script $js_unattached_volumes, $ds_clouds, $ds_pgs, @volumes, $param_delete -#end -# -## Find unattached volumes. -## If Azure volume, deduce the type. -## Calculate the volume's age. -#script "js_unattached_volumes", type: "javascript" do -# parameters "ds_clouds", "ds_pgs", "volumes", "param_delete" -# result "unattached_volumes" -# code <<-EOS -#// This is the eventual output list of unattached volumes. -#var unattached_volumes = []; -# -#// Used for date math below -#// The number of milliseconds in one day -#var ONE_DAY = 1000 * 60 * 60 * 24 -#var today = new Date() -#// Get today in epoch time in UTC time -#var today_ms = new Date(today.getTime() + today.getTimezoneOffset() * 60000); -# -#// Used for volume type discovery below -#// Build a cloud href -> type hash -#var cloud_hash = {} -#for (var i = 0; i < ds_clouds.length; i++) { -# var ds_cloud = ds_clouds[i] -# var cloud_href = ds_cloud["href"] -# var cloud_type = ds_cloud["cloud_type"] -# var cloud_name = ds_cloud["name"] -# cloud_hash[cloud_href] = { "cloud_type": cloud_type, "cloud_name": cloud_name } -#} -#// Build a pg hash that is pg resource id -> { pg type, pg name } -#var pg_hash = {} -#for (var i = 0; i < ds_pgs.length; i++) { -# var ds_pg = ds_pgs[i] -# var pg_id = ds_pg["id"] -# var pg_name = ds_pg["name"] -# var pg_account_type = "unspecified" -# if (ds_pg["account_type"]) { -# pg_account_type = ds_pg["account_type"] -# } -# pg_hash[pg_id] = { "name": pg_name, "account_type": pg_account_type } -#} -# -#// loop through the volumes and find the unattached ones and deduce storage type if Azure -#for (var i = 0; i < volumes.length; i++) { -# var vol = volumes[i] -# if (vol.status == "available") { -# // build a volume object -# var my_vol = {} -# my_vol["id"] = vol["resource_uid"] -# my_vol["name"] = vol["name"] -# my_vol["size"] = vol["size"] -# my_vol["iops"] = vol["iops"] -# my_vol["status"] = vol["status"] -# if (param_delete == "DELETE") { // Then the volume is marked that it was deleted. -# my_vol["status"] = "DELETED" -# } -# my_vol["created_at"] = vol["created_at"] -# my_vol["updated_at"] = vol["updated_at"] -# my_vol["pg_id"] = null -# my_vol["volume_type"] = null -# -# if (vol.placement_group) { -# my_vol["pg_id"] = vol.placement_group.resource_uid -# } -# -# if (vol.volume_type) { -# my_vol["volume_type"] = vol.volume_type.resource_uid -# } -# -# // Include information about azure storage types since it is helpful to know what kind of azure storage is being used when -# // doing cost optimzation. -# // We only care about Azure storage types and so first we need to figure out if this volume is in azure. -# // volume href is <>/volumes/<> -# // So extract cloud href from the volument object -# var vol_href = "" -# var vol_cloud_href = "" -# vol.links.forEach(function(link) { -# if (link.rel == "cloud") { -# vol_cloud_href = link.href -# } else if (link.rel == "self" ) { -# vol_href = link.href -# } -# }) -# -# my_vol["href"] = vol_href -# my_vol["cloud_href"] = vol_cloud_href -# my_vol["cloud_name"] = cloud_hash[vol_cloud_href]["cloud_name"] -# -# // Now use that cloud hash built above to see if this volume is in Azure/RM -# if (cloud_hash[vol_cloud_href]["cloud_type"] == "azure_v2") { -# // AzureRM - we care -# if (my_vol["pg_id"]) { -# my_vol["azure_disk_type"] = "Unmanaged" -# my_vol["azure_storage_type"] = pg_hash[my_vol["pg_id"]]["account_type"] -# my_vol["azure_storage_account_name"] = pg_hash[my_vol["pg_id"]]["name"] -# } else if (my_vol["volume_type"]) { -# my_vol["azure_disk_type"] = "Managed" -# my_vol["azure_storage_type"] = my_vol["volume_type"] -# my_vol["azure_storage_account_name"] = "N/A" -# } else { -# my_vol["azure_disk_type"] = "Unknown" -# my_vol["azure_storage_type"] = "Unknown" -# my_vol["azure_storage_account_name"] = "Unknown" -# } -# } else if (cloud_hash[vol_cloud_href]["cloud_type"] == "azure") { -# // old Azure - we also care -# my_vol["azure_disk_type"] = "Unmanaged" -# my_vol["azure_storage_type"] = "Classic" -# my_vol["azure_storage_account_name"] = pg_hash[my_vol["pg_id"]]["name"] -# } else { -# // Other clouds - we do not care -# my_vol["azure_disk_type"] = "N/A" -# my_vol["azure_storage_type"] = "N/A" -# my_vol["azure_storage_account_name"] = "N/A" -# } -# -# // Calculate the age and add the information to the hash for the unattached volume. -# // This is used in the reporting to tell the user the age of the unattachedness. -# // Get the parts of the updated_at date found in the hash -# var updated_at_parts = vol.updated_at.split(" ") -# // chop up the yyyy/mm/dd into its parts -# var date_parts = updated_at_parts[0].split("/") -# -# // Create a Date object based on the yyyy, mm, dd -# // NOTE: months in javascript goes 0-11 so subtract one from the mm bit -# var updated_at_date = new Date(date_parts[0], (Number(date_parts[1]) - 1), date_parts[2]) -# var updated_at_ms = updated_at_date.getTime() -# var difference_ms = Math.abs(today_ms - updated_at_ms) -# var number_of_days_old = Math.round(difference_ms/ONE_DAY) -# -# // Add a computed days old item to the hash -# my_vol["age"] = number_of_days_old -# -# // Push the volume hash element to the unattach_volumes array -# unattached_volumes.push(my_vol) -# } -#} -#EOS -#end - -policy "pol_unattached_volumes" do - validate_each $ds_clouds do - - # Force escalation code to run since that's where I create the volumes - check eq(0,1) - - escalate $esc_unattached_volumes - - summary_template "Created Volumes" - - detail_template <<-EOS -Created Volumes -EOS - - end -end - - -escalation "esc_unattached_volumes" do - - run "create_unattached_volumes", data -end - -define create_unattached_volumes($data) do - - $done_azure = false - $done_azure_v2 = false - $done_amazon = false - $done_google = false - $done_vscale = false - - foreach $item in $data do - $uuid = uuid() - $item_cloud_type = $item["cloud_type"] - $item_cloud_href = $item["href"] - if ($item_cloud_type == "azure") && ($done_azure == false) - $done_azure = true - @cloud = rs_cm.cloud.get(href: $item_cloud_href) - - @pgs = rs_cm.placement_groups.get(filter: ["cloud_href=="+$item_cloud_href]) - @pg = first(@pgs) - if logic_not(@pg) # this if-then and pg creation is untested - @pg = rs_cm.placement_groups.create(placement_group: {name: "uavpg-"+$uuid, cloud_href: @cloud.href}) - end - @cloud.volumes().create(volume: {name: "test-uav-azure-"+$uuid, placement_group_href: @pg.href, size: 5}) - - elsif ($item_cloud_type == "azure_v2") && ($done_azure_v2 == false) - $done_azure_v2 = true - - @cloud = rs_cm.cloud.get(href: $item_cloud_href) - - ### old-school unmanaged volume - @pgs = rs_cm.placement_groups.get(filter: ["cloud_href=="+$item_cloud_href]) - @pg = first(@pgs) - if logic_not(@pg) # this if-then and pg creation is untested - @pg = rs_cm.placement_groups.create(placement_group: {name: "testuavpg-"+$uuid, cloud_href: @cloud.href}) - end - @cloud.volumes().create(volume: {name: "test-uav-azurerm-unmanaged-"+$uuid, placement_group_href: @pg.href, size: 5}) - - ### New modern managed volume - @vol_type = first(@cloud.volume_types().get()) - @cloud.volumes().create(volume: {name: "test-uav-azurerm-managed-"+$uuid, volume_type_href: @vol_type.href, size: 5}) - - elsif ($item_cloud_type == "amazon") && ($done_amazon == false) - $done_amazon = true - @cloud = rs_cm.cloud.get(href: $item_cloud_href) - @dc = first(@cloud.datacenters()) - - @cloud.volumes().create(volume: {name: "test-uav-aws-"+$uuid, datacenter_href: @dc.href, size: 5}) - - elsif ($item_cloud_type == "google") && ($done_google == false) - $done_google = true - - @cloud = rs_cm.cloud.get(href: $item_cloud_href) - @dc = first(@cloud.datacenters()) - @vol_type = @cloud.volume_types(filter: ["name==pd-standard"]) - @cloud.volumes().create(volume: {name: "test-uav-google-"+$uuid, volume_type_href: @vol_type.href, datacenter_href: @dc.href, size: 5}) - - # VMMWARE IS A TODO - elsif ($item_cloud_type == "vscale") && ($done_vscale == false) - if ($item["name"] == "VMware Private Cloud") # extra check to use what should be a working VMware env - $done_vscale = true - - end - end - end - -end diff --git a/data/policy_permissions_list/master_policy_permissions_list.json b/data/policy_permissions_list/master_policy_permissions_list.json index 5b69a85074..b809f1e195 100644 --- a/data/policy_permissions_list/master_policy_permissions_list.json +++ b/data/policy_permissions_list/master_policy_permissions_list.json @@ -430,6 +430,28 @@ } ] }, + { + "id": "./compliance/flexera/cco/billing_center_access_report/bc_access_report.pt", + "name": "Billing Center Access Report", + "version": "3.0", + "providers": [ + { + "name": "flexera", + "permissions": [ + { + "name": "billing_center_viewer", + "read_only": true, + "required": true + }, + { + "name": "enterprise_manager", + "read_only": true, + "required": true + } + ] + } + ] + }, { "id": "./compliance/google/long_stopped_instances/google_long_stopped_instances.pt", "name": "Google Long Stopped VM Instances", @@ -579,7 +601,7 @@ { "id": "./cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances.pt", "name": "AWS Burstable EC2 Instances", - "version": "4.0", + "version": "4.1", "providers": [ { "name": "aws", @@ -2357,9 +2379,9 @@ ] }, { - "id": "./cost/budget_v_actual/monthly_budget_v_actual.pt", + "id": "./cost/flexera/cco/budget_v_actual/monthly_budget_v_actual.pt", "name": "Monthly Actual v. Budgeted Spend Report", - "version": "2.1", + "version": "2.2", "providers": [ { "name": "flexera", @@ -2374,9 +2396,9 @@ ] }, { - "id": "./cost/budget_v_actual_spend_report/budget_v_actual_spend_report.pt", + "id": "./cost/flexera/cco/budget_v_actual_spend_report/budget_v_actual_spend_report.pt", "name": "Budget vs Actual Spend Report", - "version": "2.2", + "version": "2.3", "providers": [ { "name": "flexera", @@ -2401,9 +2423,9 @@ ] }, { - "id": "./cost/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt", + "id": "./cost/flexera/cco/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt", "name": "Cloud Cost Anomaly Alerts", - "version": "3.2", + "version": "3.3", "providers": [ { "name": "flexera", @@ -2425,7 +2447,7 @@ { "id": "./cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt", "name": "Google Cloud Run Anomaly Detection", - "version": "0.1.0", + "version": "0.1.1", "providers": [ { "name": "gce", @@ -3032,7 +3054,7 @@ { "id": "./operational/aws/marketplace_new_products/aws_marketplace_new_products.pt", "name": "AWS New Marketplace Products", - "version": "0.1", + "version": "0.2", "providers": [ { "name": "flexera", @@ -3181,7 +3203,7 @@ { "id": "./operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling.pt", "name": "AKS Node Pools Without Zero Autoscaling", - "version": "3.0", + "version": "3.1", "providers": [ { "name": "azure_rm", @@ -3290,7 +3312,7 @@ { "id": "./operational/azure/marketplace_new_products/azure_marketplace_new_products.pt", "name": "Azure New Marketplace Products", - "version": "0.2", + "version": "0.3", "providers": [ { "name": "flexera", @@ -3379,9 +3401,9 @@ ] }, { - "id": "./security/storage/google/public_buckets/google_public_buckets.pt", + "id": "./security/google/public_buckets/google_public_buckets.pt", "name": "Google Open Buckets", - "version": "3.0", + "version": "3.1", "providers": [ { "name": "gce", diff --git a/data/policy_permissions_list/master_policy_permissions_list.yaml b/data/policy_permissions_list/master_policy_permissions_list.yaml index 19822c0857..02f7dd2ef8 100644 --- a/data/policy_permissions_list/master_policy_permissions_list.yaml +++ b/data/policy_permissions_list/master_policy_permissions_list.yaml @@ -259,6 +259,18 @@ - name: billing_center_viewer read_only: true required: true +- id: "./compliance/flexera/cco/billing_center_access_report/bc_access_report.pt" + name: Billing Center Access Report + version: '3.0' + :providers: + - :name: flexera + :permissions: + - name: billing_center_viewer + read_only: true + required: true + - name: enterprise_manager + read_only: true + required: true - id: "./compliance/google/long_stopped_instances/google_long_stopped_instances.pt" name: Google Long Stopped VM Instances version: '4.0' @@ -348,7 +360,7 @@ required: true - id: "./cost/aws/burstable_ec2_instances/aws_burstable_ec2_instances.pt" name: AWS Burstable EC2 Instances - version: '4.0' + version: '4.1' :providers: - :name: aws :permissions: @@ -1402,18 +1414,18 @@ - name: billing_center_viewer read_only: true required: true -- id: "./cost/budget_v_actual/monthly_budget_v_actual.pt" +- id: "./cost/flexera/cco/budget_v_actual/monthly_budget_v_actual.pt" name: Monthly Actual v. Budgeted Spend Report - version: '2.1' + version: '2.2' :providers: - :name: flexera :permissions: - name: billing_center_viewer read_only: true required: true -- id: "./cost/budget_v_actual_spend_report/budget_v_actual_spend_report.pt" +- id: "./cost/flexera/cco/budget_v_actual_spend_report/budget_v_actual_spend_report.pt" name: Budget vs Actual Spend Report - version: '2.2' + version: '2.3' :providers: - :name: flexera :permissions: @@ -1426,9 +1438,9 @@ - name: optima:billing_center:show read_only: true required: true -- id: "./cost/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt" +- id: "./cost/flexera/cco/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt" name: Cloud Cost Anomaly Alerts - version: '3.2' + version: '3.3' :providers: - :name: flexera :permissions: @@ -1440,7 +1452,7 @@ required: true - id: "./cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt" name: Google Cloud Run Anomaly Detection - version: 0.1.0 + version: 0.1.1 :providers: - :name: gce :permissions: @@ -1820,7 +1832,7 @@ required: true - id: "./operational/aws/marketplace_new_products/aws_marketplace_new_products.pt" name: AWS New Marketplace Products - version: '0.1' + version: '0.2' :providers: - :name: flexera :permissions: @@ -1900,7 +1912,7 @@ required: true - id: "./operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling.pt" name: AKS Node Pools Without Zero Autoscaling - version: '3.0' + version: '3.1' :providers: - :name: azure_rm :permissions: @@ -1959,7 +1971,7 @@ required: true - id: "./operational/azure/marketplace_new_products/azure_marketplace_new_products.pt" name: Azure New Marketplace Products - version: '0.2' + version: '0.3' :providers: - :name: flexera :permissions: @@ -2006,9 +2018,9 @@ - name: billing_center_viewer read_only: true required: true -- id: "./security/storage/google/public_buckets/google_public_buckets.pt" +- id: "./security/google/public_buckets/google_public_buckets.pt" name: Google Open Buckets - version: '3.0' + version: '3.1' :providers: - :name: gce :permissions: diff --git a/libraries/README.md b/libraries/README.md deleted file mode 100644 index 95e43555ad..0000000000 --- a/libraries/README.md +++ /dev/null @@ -1,11 +0,0 @@ -# RightScale Policy Templates Libraries and Examples - -This folder contains a set of libraries and examples that can be used to aid in the building of policy templates. You will need to add this code to your policy template to use it. All contributions are shared under the MIT license. - -## JavaScript - -## Data Sources - -## Cloud Workflow - -- [Google Authentication Library](./cwf/google_authenticate.rcl.rb) - This library is used to create the access token to authenticate with Google services. It references to credentials(`GCE_PLUGIN_ACCOUNT`,`GCE_PLUGIN_PRIVATE_KEY`), you will need to create those or swap out the credential name in your code. diff --git a/libraries/cwf/google_authenticate.rcl.rb b/libraries/cwf/google_authenticate.rcl.rb deleted file mode 100644 index 124b5d6ef8..0000000000 --- a/libraries/cwf/google_authenticate.rcl.rb +++ /dev/null @@ -1,28 +0,0 @@ -# This library code can be used to authenticate against the google api with cwf actions. -define google_authenticate() return $access_token do - #The scope below only counts for devstorage, you will want to change to accomodate your needs. - $jwt = { - iss: cred("GCE_PLUGIN_ACCOUNT"), - aud:"https://oauth2.googleapis.com/token", - exp: to_n(strftime(now()+3600, "%s")), - iat:to_n(strftime(now(), "%s")), - scope: "https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/devstorage.read_only" - } - - $signed_sigurature = jwt_encode("RS256", $jwt, cred("GCE_PLUGIN_PRIVATE_KEY"),{typ:"JWT"}) - - $response = http_request({ - verb: 'post', - href: '/token', - host: 'oauth2.googleapis.com', - https: true, - headers: { - "content-type": "application/json" - }, - body:{ - "grant_type": "urn:ietf:params:oauth:grant-type:jwt-bearer", - "assertion": $signed_sigurature - } - }) - $access_token = $response["body"]["access_token"] -end diff --git a/msp/README.md b/msp/README.md deleted file mode 100644 index f3d7546a2e..0000000000 --- a/msp/README.md +++ /dev/null @@ -1,5 +0,0 @@ -# RightScale MSP Policy Templates - -This repo contains a library of open source RightScale Policy Templates for Managed Service Providers to provide governance via automation across Cost, Security, Operational, and Compliance categories. All contributions are shared under the MIT license. - -Please contact sales@rightscale.com to learn more. diff --git a/operational/cloud_credentials/aws/changelog.md b/operational/aws/cloud_credentials/CHANGELOG.md similarity index 87% rename from operational/cloud_credentials/aws/changelog.md rename to operational/aws/cloud_credentials/CHANGELOG.md index 4d32a71ffe..2035be7b8b 100644 --- a/operational/cloud_credentials/aws/changelog.md +++ b/operational/aws/cloud_credentials/CHANGELOG.md @@ -1,5 +1,13 @@ # Changelog +## v1.13 + +- fixed link to README in policy description + +## v1.12 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.11 - Deprecated: This policy is no longer being updated. diff --git a/operational/cloud_credentials/aws/README.md b/operational/aws/cloud_credentials/README.md similarity index 100% rename from operational/cloud_credentials/aws/README.md rename to operational/aws/cloud_credentials/README.md diff --git a/operational/cloud_credentials/aws/aws_connection_key_rotation_policy.pt b/operational/aws/cloud_credentials/aws_connection_key_rotation_policy.pt similarity index 98% rename from operational/cloud_credentials/aws/aws_connection_key_rotation_policy.pt rename to operational/aws/cloud_credentials/aws_connection_key_rotation_policy.pt index 9f02b5b7a0..3f1edde4d8 100644 --- a/operational/cloud_credentials/aws/aws_connection_key_rotation_policy.pt +++ b/operational/aws/cloud_credentials/aws_connection_key_rotation_policy.pt @@ -1,15 +1,16 @@ name "AWS Cloud Credentials Rotation" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Updates the IAM user keys used to connect the Flexera CMP to an AWS account. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/cloud_credentials/aws) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Updates the IAM user keys used to connect the Flexera CMP to an AWS account. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/aws/cloud_credentials) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Operational" info( - version: "1.11", + version: "1.13", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/operational/aws/marketplace_new_products/CHANGELOG.md b/operational/aws/marketplace_new_products/CHANGELOG.md index 1ad604f8d4..b57bd109b1 100644 --- a/operational/aws/marketplace_new_products/CHANGELOG.md +++ b/operational/aws/marketplace_new_products/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v0.2 + +- fixed link to README in policy description + ## v0.1 - initial release diff --git a/operational/aws/marketplace_new_products/aws_marketplace_new_products.pt b/operational/aws/marketplace_new_products/aws_marketplace_new_products.pt index 82ae6dc796..ffef5db27d 100644 --- a/operational/aws/marketplace_new_products/aws_marketplace_new_products.pt +++ b/operational/aws/marketplace_new_products/aws_marketplace_new_products.pt @@ -1,13 +1,13 @@ name "AWS New Marketplace Products" rs_pt_ver 20180301 type "policy" -short_description "Checks for newly purchased AWS Marketplace products and reports on them. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/aws/marketplace_new_productss) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Checks for newly purchased AWS Marketplace products and reports on them. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/aws/marketplace_new_products) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "weekly" info( - version: "0.1", + version: "0.2", provider: "AWS", service: "Marketplace", policy_set: "New Marketplace Products" diff --git a/operational/dbaas/aws/rds_backup/CHANGELOG.md b/operational/aws/rds_backup/CHANGELOG.md similarity index 94% rename from operational/dbaas/aws/rds_backup/CHANGELOG.md rename to operational/aws/rds_backup/CHANGELOG.md index fabaeb32dc..95d0401fe8 100644 --- a/operational/dbaas/aws/rds_backup/CHANGELOG.md +++ b/operational/aws/rds_backup/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.8 + +- fixed link to README in policy description + ## v2.7 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/operational/dbaas/aws/rds_backup/README.md b/operational/aws/rds_backup/README.md similarity index 100% rename from operational/dbaas/aws/rds_backup/README.md rename to operational/aws/rds_backup/README.md diff --git a/operational/dbaas/aws/rds_backup/aws_rds_backup.pt b/operational/aws/rds_backup/aws_rds_backup.pt similarity index 96% rename from operational/dbaas/aws/rds_backup/aws_rds_backup.pt rename to operational/aws/rds_backup/aws_rds_backup.pt index cd46a3a90d..d988919aed 100644 --- a/operational/dbaas/aws/rds_backup/aws_rds_backup.pt +++ b/operational/aws/rds_backup/aws_rds_backup.pt @@ -1,12 +1,12 @@ name "AWS RDS Backup Settings" rs_pt_ver 20180301 type "policy" -short_description "Checks for RDS Instances that have unapproved backup settings. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/dbaas/aws/rds_backup) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Checks for RDS Instances that have unapproved backup settings. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/aws/rds_backup) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Operational" info( - version: "2.7", + version: "2.8", provider: "AWS", service: "RDS", policy_set: "" diff --git a/operational/azure/aks_nodepools_without_zero_autoscaling/CHANGELOG.md b/operational/azure/aks_nodepools_without_zero_autoscaling/CHANGELOG.md index f0d6bb33fc..30a38f5563 100644 --- a/operational/azure/aks_nodepools_without_zero_autoscaling/CHANGELOG.md +++ b/operational/azure/aks_nodepools_without_zero_autoscaling/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- fixed link to README in policy description + ## v3.0 - Several parameters altered to be more descriptive and human-readable diff --git a/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling.pt b/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling.pt index 6ec0b20233..5d8acff6d7 100644 --- a/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling.pt +++ b/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling.pt @@ -1,13 +1,13 @@ name "AKS Node Pools Without Zero Autoscaling" rs_pt_ver 20180301 type "policy" -short_description "Raise an incident if there are any AKS user node pools without zero autoscaling enabled. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/azure/aks_nodepools_without_autoscaling) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Raise an incident if there are any AKS user node pools without zero autoscaling enabled. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/azure/aks_nodepools_without_zero_autoscaling) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Operational" severity "low" default_frequency "daily" info( - version: "3.0", + version: "3.1", provider: "Azure", service: "AKS", policy_set: "" diff --git a/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling_meta_parent.pt b/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling_meta_parent.pt index 2dbf88a67a..e0e10881cb 100644 --- a/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling_meta_parent.pt +++ b/operational/azure/aks_nodepools_without_zero_autoscaling/aks_nodepools_without_zero_autoscaling_meta_parent.pt @@ -8,7 +8,7 @@ tenancy "single" default_frequency "15 minutes" info( provider: "Azure", - version: "3.0", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability + version: "3.1", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability publish: "false" ) diff --git a/operational/azure/marketplace_new_products/CHANGELOG.md b/operational/azure/marketplace_new_products/CHANGELOG.md index ea067a8480..544209e138 100644 --- a/operational/azure/marketplace_new_products/CHANGELOG.md +++ b/operational/azure/marketplace_new_products/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v0.3 + +- fixed link to README in policy description + ## v0.2 - Corrected API issue when executing policy in APAC diff --git a/operational/azure/marketplace_new_products/azure_marketplace_new_products.pt b/operational/azure/marketplace_new_products/azure_marketplace_new_products.pt index 31cf01b035..0c6f470678 100644 --- a/operational/azure/marketplace_new_products/azure_marketplace_new_products.pt +++ b/operational/azure/marketplace_new_products/azure_marketplace_new_products.pt @@ -1,13 +1,13 @@ name "Azure New Marketplace Products" rs_pt_ver 20180301 type "policy" -short_description "Checks for newly purchased Azure Marketplace products and reports on them. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/azure/marketplace_new_productss) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Checks for newly purchased Azure Marketplace products and reports on them. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/azure/marketplace_new_products) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Cost" default_frequency "weekly" info( - version: "0.2", + version: "0.3", provider: "Azure", service: "Marketplace", policy_set: "New Marketplace Products" diff --git a/operational/applied_policy_error_notification/CHANGELOG.md b/operational/flexera/automation/applied_policy_error_notification/CHANGELOG.md similarity index 76% rename from operational/applied_policy_error_notification/CHANGELOG.md rename to operational/flexera/automation/applied_policy_error_notification/CHANGELOG.md index 76bace73c6..3f4d3bd943 100644 --- a/operational/applied_policy_error_notification/CHANGELOG.md +++ b/operational/flexera/automation/applied_policy_error_notification/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v2.1 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/operational/applied_policy_error_notification/README.md b/operational/flexera/automation/applied_policy_error_notification/README.md similarity index 100% rename from operational/applied_policy_error_notification/README.md rename to operational/flexera/automation/applied_policy_error_notification/README.md diff --git a/operational/applied_policy_error_notification/applied_policy_error_notification.pt b/operational/flexera/automation/applied_policy_error_notification/applied_policy_error_notification.pt similarity index 93% rename from operational/applied_policy_error_notification/applied_policy_error_notification.pt rename to operational/flexera/automation/applied_policy_error_notification/applied_policy_error_notification.pt index 3e38556b10..797d0b72d1 100644 --- a/operational/applied_policy_error_notification/applied_policy_error_notification.pt +++ b/operational/flexera/automation/applied_policy_error_notification/applied_policy_error_notification.pt @@ -1,16 +1,17 @@ name "Applied Policy Error Notification" rs_pt_ver 20180301 type "policy" -short_description "Collects all currently applied policies and raises an incident for any in an error state. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/applied_policy_error_notification/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Collects all currently applied policies and raises an incident for any in an error state. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/automation/applied_policy_error_notification/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Operational" default_frequency "hourly" info( - version: "2.1", + version: "2.2", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/operational/bill_processing_errors_notification/CHANGELOG.md b/operational/flexera/cco/bill_processing_errors_notification/CHANGELOG.md similarity index 88% rename from operational/bill_processing_errors_notification/CHANGELOG.md rename to operational/flexera/cco/bill_processing_errors_notification/CHANGELOG.md index 579bfb9075..1802668205 100644 --- a/operational/bill_processing_errors_notification/CHANGELOG.md +++ b/operational/flexera/cco/bill_processing_errors_notification/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.1 + +- Updated description to account for new file path in Github repository + ## v2.0 - Deprecated `auth_rs` authentication (type: `rightscale`) and replaced with `auth_flexera` (type: `oauth2`). This is a breaking change which requires a Credential for `auth_flexera` [`provider=flexera`] before the policy can be applied. Please see docs for setting up [Provider-Specific Credentials](https://docs.flexera.com/flexera/EN/Automation/ProviderCredentials.htm) diff --git a/operational/bill_processing_errors_notification/README.md b/operational/flexera/cco/bill_processing_errors_notification/README.md similarity index 100% rename from operational/bill_processing_errors_notification/README.md rename to operational/flexera/cco/bill_processing_errors_notification/README.md diff --git a/operational/bill_processing_errors_notification/bill_processing_errors_notification.pt b/operational/flexera/cco/bill_processing_errors_notification/bill_processing_errors_notification.pt similarity index 96% rename from operational/bill_processing_errors_notification/bill_processing_errors_notification.pt rename to operational/flexera/cco/bill_processing_errors_notification/bill_processing_errors_notification.pt index 9ac1a61dd8..149cf08f93 100644 --- a/operational/bill_processing_errors_notification/bill_processing_errors_notification.pt +++ b/operational/flexera/cco/bill_processing_errors_notification/bill_processing_errors_notification.pt @@ -1,13 +1,13 @@ name "Bill Processing Error Notification" rs_pt_ver 20180301 type "policy" -short_description "Collects all currently applied policies and raises an incident for any in an error state. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/bill_processing_errors_notification/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Collects all currently applied policies and raises an incident for any in an error state. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/cco/bill_processing_errors_notification/) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Operational" default_frequency "daily" info( - version: "2.0", + version: "2.1", provider: "Flexera", service: "CCO", policy_set: "" diff --git a/operational/snapshots/CHANGELOG.md b/operational/flexera/cmp/snapshots/CHANGELOG.md similarity index 88% rename from operational/snapshots/CHANGELOG.md rename to operational/flexera/cmp/snapshots/CHANGELOG.md index f641573db9..824983752a 100644 --- a/operational/snapshots/CHANGELOG.md +++ b/operational/flexera/cmp/snapshots/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.11 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.10 - Deprecated: This policy is no longer being updated. diff --git a/operational/snapshots/README.md b/operational/flexera/cmp/snapshots/README.md similarity index 100% rename from operational/snapshots/README.md rename to operational/flexera/cmp/snapshots/README.md diff --git a/operational/snapshots/no_recent_snapshots.pt b/operational/flexera/cmp/snapshots/no_recent_snapshots.pt similarity index 98% rename from operational/snapshots/no_recent_snapshots.pt rename to operational/flexera/cmp/snapshots/no_recent_snapshots.pt index bc03c8875d..0a79dc0b85 100644 --- a/operational/snapshots/no_recent_snapshots.pt +++ b/operational/flexera/cmp/snapshots/no_recent_snapshots.pt @@ -1,15 +1,16 @@ name "No Recent Snapshots" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Policy to check for snaphots between now and a certain numer of days. \n See the [README](https://github.com/flexera-public/policy_templates/blob/master/operational/snapshots/) for details and example." +short_description "**Deprecated: This policy is no longer being updated.** Policy to check for snaphots between now and a certain numer of days. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/cmp/snapshots/) for details and example." long_description "" severity "low" category "Operational" info( - version: "1.10", + version: "1.11", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/compliance/disallowed_images/CHANGELOG.md b/operational/flexera/cmp/stranded_servers/CHANGELOG.md similarity index 74% rename from compliance/disallowed_images/CHANGELOG.md rename to operational/flexera/cmp/stranded_servers/CHANGELOG.md index 04abe08a3d..f84a6068a8 100644 --- a/compliance/disallowed_images/CHANGELOG.md +++ b/operational/flexera/cmp/stranded_servers/CHANGELOG.md @@ -1,25 +1,33 @@ # Changelog -## v1.5 +## v1.7 + +- Updated policy metadata to ensure that it does not publish to the catalog + +## v1.6 - Deprecated: This policy is no longer being updated. -## v1.4 +## v1.5 - updated README.md rightscale documentation links with docs.flexera documentation links -## v1.3 +## v1.4 - Modified escalation label and description for consistency -## v1.2 +## v1.3 - Adding incident resource table -## v1.1 +## v1.2 - Updated the metadata +## v1.1 + +- Added Permission block + ## v1.0 - initial release diff --git a/operational/stranded_servers/README.md b/operational/flexera/cmp/stranded_servers/README.md similarity index 100% rename from operational/stranded_servers/README.md rename to operational/flexera/cmp/stranded_servers/README.md diff --git a/operational/stranded_servers/stranded_servers.pt b/operational/flexera/cmp/stranded_servers/stranded_servers.pt similarity index 95% rename from operational/stranded_servers/stranded_servers.pt rename to operational/flexera/cmp/stranded_servers/stranded_servers.pt index f30188fb4a..693e5c0f87 100644 --- a/operational/stranded_servers/stranded_servers.pt +++ b/operational/flexera/cmp/stranded_servers/stranded_servers.pt @@ -1,15 +1,16 @@ name "Stranded Servers" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Report and remediate any Servers that are stranded in booting. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/stranded_servers) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Report and remediate any Servers that are stranded in booting. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/cmp/stranded_servers) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Operational" severity "low" info( - version: "1.6", + version: "1.7", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/operational/fnms/schedule_fnms_reports/CHANGELOG.md b/operational/flexera/fnms/schedule_fnms_reports/CHANGELOG.md similarity index 92% rename from operational/fnms/schedule_fnms_reports/CHANGELOG.md rename to operational/flexera/fnms/schedule_fnms_reports/CHANGELOG.md index 5be0c5d874..8153850e4b 100644 --- a/operational/fnms/schedule_fnms_reports/CHANGELOG.md +++ b/operational/flexera/fnms/schedule_fnms_reports/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- Updated description to account for new file path in Github repository + ## v3.0 - Updated policy to use Flexera One ITAM SOAP APIs. Full details here: [Flexera One ITAM SOAP APIs Transitioning to Flexera One IAM](https://community.flexera.com/t5/Flexera-One-Blog/Flexera-One-ITAM-SOAP-APIs-Transitioning-to-Flexera-One-IAM/ba-p/229399) diff --git a/operational/fnms/schedule_fnms_reports/README.md b/operational/flexera/fnms/schedule_fnms_reports/README.md similarity index 100% rename from operational/fnms/schedule_fnms_reports/README.md rename to operational/flexera/fnms/schedule_fnms_reports/README.md diff --git a/operational/fnms/schedule_fnms_reports/images/APIToken.png b/operational/flexera/fnms/schedule_fnms_reports/images/APIToken.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/APIToken.png rename to operational/flexera/fnms/schedule_fnms_reports/images/APIToken.png diff --git a/operational/fnms/schedule_fnms_reports/images/CMP_NewToken.png b/operational/flexera/fnms/schedule_fnms_reports/images/CMP_NewToken.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/CMP_NewToken.png rename to operational/flexera/fnms/schedule_fnms_reports/images/CMP_NewToken.png diff --git a/operational/fnms/schedule_fnms_reports/images/CreateServeceAccount.png b/operational/flexera/fnms/schedule_fnms_reports/images/CreateServeceAccount.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/CreateServeceAccount.png rename to operational/flexera/fnms/schedule_fnms_reports/images/CreateServeceAccount.png diff --git a/operational/fnms/schedule_fnms_reports/images/FNMS_cv_Report.png b/operational/flexera/fnms/schedule_fnms_reports/images/FNMS_cv_Report.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/FNMS_cv_Report.png rename to operational/flexera/fnms/schedule_fnms_reports/images/FNMS_cv_Report.png diff --git a/operational/fnms/schedule_fnms_reports/images/ReportNumber.png b/operational/flexera/fnms/schedule_fnms_reports/images/ReportNumber.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/ReportNumber.png rename to operational/flexera/fnms/schedule_fnms_reports/images/ReportNumber.png diff --git a/operational/fnms/schedule_fnms_reports/images/WebServiceRole.png b/operational/flexera/fnms/schedule_fnms_reports/images/WebServiceRole.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/WebServiceRole.png rename to operational/flexera/fnms/schedule_fnms_reports/images/WebServiceRole.png diff --git a/operational/fnms/schedule_fnms_reports/images/email_output.png b/operational/flexera/fnms/schedule_fnms_reports/images/email_output.png similarity index 100% rename from operational/fnms/schedule_fnms_reports/images/email_output.png rename to operational/flexera/fnms/schedule_fnms_reports/images/email_output.png diff --git a/operational/fnms/schedule_fnms_reports/schedule-fnms-report.pt b/operational/flexera/fnms/schedule_fnms_reports/schedule-fnms-report.pt similarity index 97% rename from operational/fnms/schedule_fnms_reports/schedule-fnms-report.pt rename to operational/flexera/fnms/schedule_fnms_reports/schedule-fnms-report.pt index 5fca438005..dbff6f7fbe 100644 --- a/operational/fnms/schedule_fnms_reports/schedule-fnms-report.pt +++ b/operational/flexera/fnms/schedule_fnms_reports/schedule-fnms-report.pt @@ -1,13 +1,13 @@ name "Schedule FlexNet Manager Report" rs_pt_ver 20180301 type "policy" -short_description "Schedule a FlexNet Manager report (Custom view) and send it as a email to one or more recipients. This template uses the SOAP version of the FlexNet Manager APIs. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/fnms/schedule_fnms_reports) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Schedule a FlexNet Manager report (Custom view) and send it as a email to one or more recipients. This template uses the SOAP version of the FlexNet Manager APIs. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/fnms/schedule_fnms_reports) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Operational" default_frequency "weekly" info( - version: "3.0", + version: "3.1", provider: "Flexera", service: "FNMS", policy_set: "Schedule Report" diff --git a/operational/itam/schedule_itam_report/CHANGELOG.md b/operational/flexera/itam/schedule_itam_report/CHANGELOG.md similarity index 78% rename from operational/itam/schedule_itam_report/CHANGELOG.md rename to operational/flexera/itam/schedule_itam_report/CHANGELOG.md index 4e5441825f..453c27ea40 100644 --- a/operational/itam/schedule_itam_report/CHANGELOG.md +++ b/operational/flexera/itam/schedule_itam_report/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v0.1.3 + +- Updated description to account for new file path in Github repository + ## v0.1.2 - Fixed a pagination bug that caused an error when the policy template requested information from the IT Asset Management (ITAM) server, thus failing the execution. diff --git a/operational/itam/schedule_itam_report/README.md b/operational/flexera/itam/schedule_itam_report/README.md similarity index 100% rename from operational/itam/schedule_itam_report/README.md rename to operational/flexera/itam/schedule_itam_report/README.md diff --git a/operational/itam/schedule_itam_report/images/APIToken.png b/operational/flexera/itam/schedule_itam_report/images/APIToken.png similarity index 100% rename from operational/itam/schedule_itam_report/images/APIToken.png rename to operational/flexera/itam/schedule_itam_report/images/APIToken.png diff --git a/operational/itam/schedule_itam_report/images/CMP_NewToken.png b/operational/flexera/itam/schedule_itam_report/images/CMP_NewToken.png similarity index 100% rename from operational/itam/schedule_itam_report/images/CMP_NewToken.png rename to operational/flexera/itam/schedule_itam_report/images/CMP_NewToken.png diff --git a/operational/itam/schedule_itam_report/images/CreateServeceAccount.png b/operational/flexera/itam/schedule_itam_report/images/CreateServeceAccount.png similarity index 100% rename from operational/itam/schedule_itam_report/images/CreateServeceAccount.png rename to operational/flexera/itam/schedule_itam_report/images/CreateServeceAccount.png diff --git a/operational/itam/schedule_itam_report/images/FNMS_cv_Report.png b/operational/flexera/itam/schedule_itam_report/images/FNMS_cv_Report.png similarity index 100% rename from operational/itam/schedule_itam_report/images/FNMS_cv_Report.png rename to operational/flexera/itam/schedule_itam_report/images/FNMS_cv_Report.png diff --git a/operational/itam/schedule_itam_report/images/ReportNumber.png b/operational/flexera/itam/schedule_itam_report/images/ReportNumber.png similarity index 100% rename from operational/itam/schedule_itam_report/images/ReportNumber.png rename to operational/flexera/itam/schedule_itam_report/images/ReportNumber.png diff --git a/operational/itam/schedule_itam_report/images/WebServiceRole.png b/operational/flexera/itam/schedule_itam_report/images/WebServiceRole.png similarity index 100% rename from operational/itam/schedule_itam_report/images/WebServiceRole.png rename to operational/flexera/itam/schedule_itam_report/images/WebServiceRole.png diff --git a/operational/itam/schedule_itam_report/images/email_output.png b/operational/flexera/itam/schedule_itam_report/images/email_output.png similarity index 100% rename from operational/itam/schedule_itam_report/images/email_output.png rename to operational/flexera/itam/schedule_itam_report/images/email_output.png diff --git a/operational/itam/schedule_itam_report/schedule-itam-report.pt b/operational/flexera/itam/schedule_itam_report/schedule-itam-report.pt similarity index 97% rename from operational/itam/schedule_itam_report/schedule-itam-report.pt rename to operational/flexera/itam/schedule_itam_report/schedule-itam-report.pt index 759e108dc1..cd6a2f1d03 100644 --- a/operational/itam/schedule_itam_report/schedule-itam-report.pt +++ b/operational/flexera/itam/schedule_itam_report/schedule-itam-report.pt @@ -1,13 +1,13 @@ name "Schedule ITAM Report" rs_pt_ver 20180301 type "policy" -short_description "Schedule a Flexera ITAM report (Custom view) and send it as a email to one or more recipients. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/itam/schedule_itam_report) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Schedule a Flexera ITAM report (Custom view) and send it as a email to one or more recipients. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/itam/schedule_itam_report) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Operational" default_frequency "weekly" info( - version: "0.1.2", + version: "0.1.3", provider: "Flexera ITAM", service: "", policy_set: "Schedule Flexera ITAM Report" diff --git a/operational/compute_instance_migration/README.md b/operational/flexera/risc/compute_instance_migration/README.md similarity index 100% rename from operational/compute_instance_migration/README.md rename to operational/flexera/risc/compute_instance_migration/README.md diff --git a/operational/compute_instance_migration/changelog.md b/operational/flexera/risc/compute_instance_migration/changelog.md similarity index 86% rename from operational/compute_instance_migration/changelog.md rename to operational/flexera/risc/compute_instance_migration/changelog.md index 7b41027ed5..507761ad41 100644 --- a/operational/compute_instance_migration/changelog.md +++ b/operational/flexera/risc/compute_instance_migration/changelog.md @@ -1,5 +1,9 @@ # Changelog +## v1.6 + +- Updated description to account for new file path in Github repository + ## v1.5 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/operational/compute_instance_migration/risc-compute-instance-migration-recos.pt b/operational/flexera/risc/compute_instance_migration/risc-compute-instance-migration-recos.pt similarity index 97% rename from operational/compute_instance_migration/risc-compute-instance-migration-recos.pt rename to operational/flexera/risc/compute_instance_migration/risc-compute-instance-migration-recos.pt index 1b1dea3178..5692d2a301 100644 --- a/operational/compute_instance_migration/risc-compute-instance-migration-recos.pt +++ b/operational/flexera/risc/compute_instance_migration/risc-compute-instance-migration-recos.pt @@ -1,13 +1,13 @@ name "Application Migration Recommendations" rs_pt_ver 20180301 type "policy" -short_description "This Policy Template will analyze RISC CloudScape data and will generate recommendations for migrating application stacks to the most cost effective for each cloud providers & regions. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/compute_instance_migration) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "This Policy Template will analyze RISC CloudScape data and will generate recommendations for migrating application stacks to the most cost effective for each cloud providers & regions. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/risc/compute_instance_migration) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Operational" severity "low" tenancy "single" info( - version: "1.5", + version: "1.6", provider: "Flexera RISC", service: "", policy_set: "" diff --git a/operational/azure/network_flow/CHANGELOG.md b/operational/flexera/risc/network_flow/CHANGELOG.md similarity index 88% rename from operational/azure/network_flow/CHANGELOG.md rename to operational/flexera/risc/network_flow/CHANGELOG.md index 6f829d58ee..c58e092876 100644 --- a/operational/azure/network_flow/CHANGELOG.md +++ b/operational/flexera/risc/network_flow/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.6 + +- fixed link to README in policy description + ## v1.5 - Replaced references `github.com/rightscale/policy_templates` and `github.com/flexera/policy_templates` with `github.com/flexera-public/policy_templates` diff --git a/operational/azure/network_flow/README.md b/operational/flexera/risc/network_flow/README.md similarity index 100% rename from operational/azure/network_flow/README.md rename to operational/flexera/risc/network_flow/README.md diff --git a/operational/azure/network_flow/risc-netflow.pt b/operational/flexera/risc/network_flow/risc-netflow.pt similarity index 96% rename from operational/azure/network_flow/risc-netflow.pt rename to operational/flexera/risc/network_flow/risc-netflow.pt index 6cf41c2d11..fdc638604f 100644 --- a/operational/azure/network_flow/risc-netflow.pt +++ b/operational/flexera/risc/network_flow/risc-netflow.pt @@ -1,12 +1,12 @@ name "NetFlow Top Talkers" rs_pt_ver 20180301 type "policy" -short_description "This Policy Template will analyze RISC Foundations NetFlow data and will leverage these traffic patterns to identify the top communication routes from each application stack to external dependencies. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/network_flow) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "This Policy Template will analyze RISC Foundations NetFlow data and will leverage these traffic patterns to identify the top communication routes from each application stack to external dependencies. See the [README](https://github.com/flexera-public/policy_templates/tree/master/operational/flexera/risc/network_flow) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Operational" severity "low" info( - version: "1.5", + version: "1.6", provider: "Flexera RISC", service: "", policy_set: "" diff --git a/operational/vmware/instance_tag_sync/changelog.md b/operational/vmware/instance_tag_sync/CHANGELOG.md similarity index 86% rename from operational/vmware/instance_tag_sync/changelog.md rename to operational/vmware/instance_tag_sync/CHANGELOG.md index d351d93f98..c86a9825f5 100644 --- a/operational/vmware/instance_tag_sync/changelog.md +++ b/operational/vmware/instance_tag_sync/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.9 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.8 - Deprecated: This policy is no longer being updated. diff --git a/operational/vmware/instance_tag_sync/instance_tag_sync.pt b/operational/vmware/instance_tag_sync/instance_tag_sync.pt index 0a2c258809..7c6f3da68f 100644 --- a/operational/vmware/instance_tag_sync/instance_tag_sync.pt +++ b/operational/vmware/instance_tag_sync/instance_tag_sync.pt @@ -6,10 +6,11 @@ long_description "" severity "medium" category "Operational" info( - version: "1.8", + version: "1.9", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) ############################################################################### diff --git a/security/aws/iam_mfa_enabled_for_iam_users/CHANGELOG.md b/security/aws/iam_mfa_enabled_for_iam_users/CHANGELOG.md index e5d2302503..4ced8795a3 100644 --- a/security/aws/iam_mfa_enabled_for_iam_users/CHANGELOG.md +++ b/security/aws/iam_mfa_enabled_for_iam_users/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.7 + +- fixed link to README in policy description + ## v2.6 - Updated description of `Account Number` parameter diff --git a/security/aws/iam_mfa_enabled_for_iam_users/iam_mfa_enabled_for_iam_users.pt b/security/aws/iam_mfa_enabled_for_iam_users/iam_mfa_enabled_for_iam_users.pt index 124fa09416..1343866af6 100644 --- a/security/aws/iam_mfa_enabled_for_iam_users/iam_mfa_enabled_for_iam_users.pt +++ b/security/aws/iam_mfa_enabled_for_iam_users/iam_mfa_enabled_for_iam_users.pt @@ -1,13 +1,13 @@ name "AWS IAM Ensure MFA Enabled For IAM Users" rs_pt_ver 20180301 type "policy" -short_description "Report if MFA is not enabled for IAM users with a console password. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/aws/iam_no_root_for_tasks) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Report if MFA is not enabled for IAM users with a console password. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/aws/iam_mfa_enabled_for_iam_users) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Security" severity "high" default_frequency "15 minutes" info( - version: "2.6", + version: "2.7", provider: "AWS", service: "IAM", policy_set: "CIS", diff --git a/security/aws/iam_prevent_password_reuse/CHANGELOG.md b/security/aws/iam_prevent_password_reuse/CHANGELOG.md index 7db2626e20..708c226c22 100644 --- a/security/aws/iam_prevent_password_reuse/CHANGELOG.md +++ b/security/aws/iam_prevent_password_reuse/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.6 + +- fixed link to README in policy description + ## v2.5 - Updated description of `Account Number` parameter diff --git a/security/aws/iam_prevent_password_reuse/iam_prevent_password_reuse.pt b/security/aws/iam_prevent_password_reuse/iam_prevent_password_reuse.pt index 8e12ccbd30..3e82ea2c84 100644 --- a/security/aws/iam_prevent_password_reuse/iam_prevent_password_reuse.pt +++ b/security/aws/iam_prevent_password_reuse/iam_prevent_password_reuse.pt @@ -1,13 +1,13 @@ name "AWS IAM Report Password Policy No Restrict Password Reuse" rs_pt_ver 20180301 type "policy" -short_description "Report if password policy does not restrict reusing passwords or saves fewer than 24 passwords for this purpose. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/aws/iam_min_password_length) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Report if password policy does not restrict reusing passwords or saves fewer than 24 passwords for this purpose. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/aws/iam_prevent_password_reuse) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.5", + version: "2.6", provider: "AWS", service: "IAM", policy_set: "CIS", diff --git a/security/storage/aws/public_buckets/CHANGELOG.md b/security/aws/public_buckets/CHANGELOG.md similarity index 97% rename from security/storage/aws/public_buckets/CHANGELOG.md rename to security/aws/public_buckets/CHANGELOG.md index 5e1ea13226..9add00c29f 100644 --- a/security/storage/aws/public_buckets/CHANGELOG.md +++ b/security/aws/public_buckets/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- fixed link to README in policy description + ## v3.0 - Several parameters altered to be more descriptive and human-readable diff --git a/security/storage/aws/public_buckets/README.md b/security/aws/public_buckets/README.md similarity index 100% rename from security/storage/aws/public_buckets/README.md rename to security/aws/public_buckets/README.md diff --git a/security/storage/aws/public_buckets/aws_public_buckets.pt b/security/aws/public_buckets/aws_public_buckets.pt similarity index 98% rename from security/storage/aws/public_buckets/aws_public_buckets.pt rename to security/aws/public_buckets/aws_public_buckets.pt index 2a31910340..baca562f13 100644 --- a/security/storage/aws/public_buckets/aws_public_buckets.pt +++ b/security/aws/public_buckets/aws_public_buckets.pt @@ -1,13 +1,13 @@ name "AWS Open S3 Buckets" rs_pt_ver 20180301 type "policy" -short_description "Check for S3 buckets that are open to everyone. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/storage/aws/public_buckets) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Check for S3 buckets that are open to everyone. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/aws/public_buckets) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Security" default_frequency "daily" info( - version: "3.0", + version: "3.1", provider: "AWS", service: "S3", policy_set: "Open S3 Buckets" diff --git a/security/storage/aws/public_buckets/aws_public_buckets_meta_parent.pt b/security/aws/public_buckets/aws_public_buckets_meta_parent.pt similarity index 99% rename from security/storage/aws/public_buckets/aws_public_buckets_meta_parent.pt rename to security/aws/public_buckets/aws_public_buckets_meta_parent.pt index d6ecd9537e..7602f3b777 100644 --- a/security/storage/aws/public_buckets/aws_public_buckets_meta_parent.pt +++ b/security/aws/public_buckets/aws_public_buckets_meta_parent.pt @@ -1,14 +1,14 @@ name "AWS Open S3 Buckets Meta Parent" rs_pt_ver 20180301 type "policy" -short_description "Applies and manages \"child\" [AWS Open S3 Buckets](https://github.com/flexera-public/policy_templates/tree/master/security/storage/aws/public_buckets) Policies." +short_description "Applies and manages \"child\" [AWS Open S3 Buckets](https://github.com/flexera-public/policy_templates/tree/master/security/aws/public_buckets) Policies." severity "low" category "Cost" tenancy "single" default_frequency "15 minutes" info( provider: "AWS", - version: "3.0", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability + version: "3.1", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability publish: "false" ) diff --git a/security/storage/aws/s3_buckets_without_server_access_logging/CHANGELOG.md b/security/aws/s3_buckets_without_server_access_logging/CHANGELOG.md similarity index 94% rename from security/storage/aws/s3_buckets_without_server_access_logging/CHANGELOG.md rename to security/aws/s3_buckets_without_server_access_logging/CHANGELOG.md index 6b57499a08..4ab13eafe1 100644 --- a/security/storage/aws/s3_buckets_without_server_access_logging/CHANGELOG.md +++ b/security/aws/s3_buckets_without_server_access_logging/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.8 + +- fixed link to README in policy description + ## v2.7 - Updated description of `Account Number` parameter diff --git a/security/storage/aws/s3_buckets_without_server_access_logging/README.md b/security/aws/s3_buckets_without_server_access_logging/README.md similarity index 100% rename from security/storage/aws/s3_buckets_without_server_access_logging/README.md rename to security/aws/s3_buckets_without_server_access_logging/README.md diff --git a/security/storage/aws/s3_buckets_without_server_access_logging/aws_s3_buckets_without_server_access_logging.pt b/security/aws/s3_buckets_without_server_access_logging/aws_s3_buckets_without_server_access_logging.pt similarity index 97% rename from security/storage/aws/s3_buckets_without_server_access_logging/aws_s3_buckets_without_server_access_logging.pt rename to security/aws/s3_buckets_without_server_access_logging/aws_s3_buckets_without_server_access_logging.pt index a7e2311bde..d6dd3ea7a2 100644 --- a/security/storage/aws/s3_buckets_without_server_access_logging/aws_s3_buckets_without_server_access_logging.pt +++ b/security/aws/s3_buckets_without_server_access_logging/aws_s3_buckets_without_server_access_logging.pt @@ -1,12 +1,12 @@ name "AWS S3 Buckets without Server Access Logging" rs_pt_ver 20180301 type "policy" -short_description "Checks for buckets that do not have server_access_logging enabled. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/storage/aws/s3_buckets_without_server_access_logging) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Checks for buckets that do not have server_access_logging enabled. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/aws/s3_buckets_without_server_access_logging) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Security" info( - version: "2.7", + version: "2.8", provider: "AWS", service: "S3", policy_set: "" diff --git a/security/azure/pg_conn_throttling/CHANGELOG.md b/security/azure/pg_conn_throttling/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/pg_conn_throttling/CHANGELOG.md +++ b/security/azure/pg_conn_throttling/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/pg_conn_throttling/pg_conn_throttling.pt b/security/azure/pg_conn_throttling/pg_conn_throttling.pt index 8341b35ae4..a881b04e36 100644 --- a/security/azure/pg_conn_throttling/pg_conn_throttling.pt +++ b/security/azure/pg_conn_throttling/pg_conn_throttling.pt @@ -1,13 +1,13 @@ name "Azure Ensure PostgreSQL Servers Connection Throttling Enabled" rs_pt_ver 20180301 type "policy" -short_description "Report if any PostgreSQL server instances do not have connection throttling enabled. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/pg_conn_throttling) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any PostgreSQL server instances do not have connection throttling enabled. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/pg_conn_throttling) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "PostgreSQL", policy_set: "CIS", diff --git a/security/azure/pg_log_retention/CHANGELOG.md b/security/azure/pg_log_retention/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/pg_log_retention/CHANGELOG.md +++ b/security/azure/pg_log_retention/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/pg_log_retention/pg_log_retention.pt b/security/azure/pg_log_retention/pg_log_retention.pt index a497c5db5b..33574f22d1 100644 --- a/security/azure/pg_log_retention/pg_log_retention.pt +++ b/security/azure/pg_log_retention/pg_log_retention.pt @@ -1,13 +1,13 @@ name "Azure Ensure PostgreSQL Servers Sufficient Log Retention" rs_pt_ver 20180301 type "policy" -short_description "Report if any PostgreSQL server instances do not have log retention configured for more than 3 days. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/pg_log_retention) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any PostgreSQL server instances do not have log retention configured for more than 3 days. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/pg_log_retention) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "PostgreSQL", policy_set: "CIS", diff --git a/security/azure/pg_log_settings/CHANGELOG.md b/security/azure/pg_log_settings/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/pg_log_settings/CHANGELOG.md +++ b/security/azure/pg_log_settings/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/pg_log_settings/pg_log_settings.pt b/security/azure/pg_log_settings/pg_log_settings.pt index fcef826243..eeaf4bcddd 100644 --- a/security/azure/pg_log_settings/pg_log_settings.pt +++ b/security/azure/pg_log_settings/pg_log_settings.pt @@ -1,13 +1,13 @@ name "Azure Ensure Correct PostgreSQL Servers Log Settings" rs_pt_ver 20180301 type "policy" -short_description "Report if any PostgreSQL server instances are not configured with correct log settings. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/pg_log_settings) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any PostgreSQL server instances are not configured with correct log settings. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/pg_log_settings) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "PostgreSQL", policy_set: "CIS", diff --git a/security/azure/resources_with_public_ip_address/CHANGELOG.md b/security/azure/resources_with_public_ip_address/CHANGELOG.md index 66a68b3755..c55b4630e2 100644 --- a/security/azure/resources_with_public_ip_address/CHANGELOG.md +++ b/security/azure/resources_with_public_ip_address/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.6 + +- fixed link to README in policy description + ## v2.5 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/resources_with_public_ip_address/azure_open_ip_address_policy.pt b/security/azure/resources_with_public_ip_address/azure_open_ip_address_policy.pt index ef91464419..bee7a69c29 100644 --- a/security/azure/resources_with_public_ip_address/azure_open_ip_address_policy.pt +++ b/security/azure/resources_with_public_ip_address/azure_open_ip_address_policy.pt @@ -1,13 +1,13 @@ name "Azure Resources with public IP address" rs_pt_ver 20180301 type "policy" -short_description "Get the Resource Group or any resources with public IP address. See the [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Get the Resource Group or any resources with public IP address. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/resources_with_public_ip_address) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" severity "low" category "Security" default_frequency "hourly" info( - version: "2.5", + version: "2.6", provider: "Azure", service: "compute", policy_set: "" diff --git a/security/azure/sql_auditing_retention/CHANGELOG.md b/security/azure/sql_auditing_retention/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/sql_auditing_retention/CHANGELOG.md +++ b/security/azure/sql_auditing_retention/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/sql_auditing_retention/sql_auditing_retention.pt b/security/azure/sql_auditing_retention/sql_auditing_retention.pt index 01c008f21d..2af11cea4f 100644 --- a/security/azure/sql_auditing_retention/sql_auditing_retention.pt +++ b/security/azure/sql_auditing_retention/sql_auditing_retention.pt @@ -1,13 +1,13 @@ name "Azure Ensure SQL Server Minimum Auditing Retention Of 90 Days" rs_pt_ver 20180301 type "policy" -short_description "Report if any SQL server instances do not have auditing retention configured for 90 days or more. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/sql_auditing_retention) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any SQL server instances do not have auditing retention configured for 90 days or more. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/sql_auditing_retention) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "SQL", policy_set: "CIS", diff --git a/security/azure/sql_db_encryption/CHANGELOG.md b/security/azure/sql_db_encryption/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/sql_db_encryption/CHANGELOG.md +++ b/security/azure/sql_db_encryption/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/sql_db_encryption/sql_db_encryption.pt b/security/azure/sql_db_encryption/sql_db_encryption.pt index 6015ec2b87..b1d4db6736 100644 --- a/security/azure/sql_db_encryption/sql_db_encryption.pt +++ b/security/azure/sql_db_encryption/sql_db_encryption.pt @@ -1,13 +1,13 @@ name "Azure Ensure SQL Database Encryption" rs_pt_ver 20180301 type "policy" -short_description "Report if any SQL databases do not have encryption enabled. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/sql_db_encryption) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any SQL databases do not have encryption enabled. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/sql_db_encryption) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "SQL", policy_set: "CIS", diff --git a/security/azure/sql_server_atp/CHANGELOG.md b/security/azure/sql_server_atp/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/sql_server_atp/CHANGELOG.md +++ b/security/azure/sql_server_atp/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/sql_server_atp/sql_server_atp.pt b/security/azure/sql_server_atp/sql_server_atp.pt index b3b0095271..9d20d30d5e 100644 --- a/security/azure/sql_server_atp/sql_server_atp.pt +++ b/security/azure/sql_server_atp/sql_server_atp.pt @@ -1,13 +1,13 @@ name "Azure Ensure SQL Server ATP (Advanced Threat Protection) Enabled" rs_pt_ver 20180301 type "policy" -short_description "Report if any SQL server instances do not have ATP (Advanced Threat Protection) enabled. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/sql_server_atp) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any SQL server instances do not have ATP (Advanced Threat Protection) enabled. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/sql_server_atp) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "SQL", policy_set: "CIS", diff --git a/security/azure/sql_server_va_scans/CHANGELOG.md b/security/azure/sql_server_va_scans/CHANGELOG.md index 566279e280..2fb3e7d1c8 100644 --- a/security/azure/sql_server_va_scans/CHANGELOG.md +++ b/security/azure/sql_server_va_scans/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.2 + +- fixed link to README in policy description + ## v2.1 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/azure/sql_server_va_scans/sql_server_va_scans.pt b/security/azure/sql_server_va_scans/sql_server_va_scans.pt index 0a8a307a61..eecee88465 100644 --- a/security/azure/sql_server_va_scans/sql_server_va_scans.pt +++ b/security/azure/sql_server_va_scans/sql_server_va_scans.pt @@ -1,13 +1,13 @@ name "Azure Ensure SQL Server VA Periodic Scans Enabled" rs_pt_ver 20180301 type "policy" -short_description "Report if any SQL server instances do not have Vulnerability Assessment (VA) periodic scans enabled. \n See the [README](https://github.com/flexera/policy_templates/tree/master/security/azure/sql_server_va_scans) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." +short_description "Report if any SQL server instances do not have Vulnerability Assessment (VA) periodic scans enabled. \n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/sql_server_va_scans) and [docs.rightscale.com/policies](https://docs.rightscale.com/policies/) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "2.1", + version: "2.2", provider: "Azure", service: "SQL", policy_set: "CIS", diff --git a/security/storage/azure/storage_account_https_enabled/CHANGELOG.md b/security/azure/storage_account_https_enabled/CHANGELOG.md similarity index 93% rename from security/storage/azure/storage_account_https_enabled/CHANGELOG.md rename to security/azure/storage_account_https_enabled/CHANGELOG.md index 64ca21e021..2978f612f6 100644 --- a/security/storage/azure/storage_account_https_enabled/CHANGELOG.md +++ b/security/azure/storage_account_https_enabled/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v2.7 + +- fixed link to README in policy description + ## v2.6 - Fixed error where policy would fail completely when trying to access resources credential does not have access to. Policy will now simply skip these resources. diff --git a/security/storage/azure/storage_account_https_enabled/README.md b/security/azure/storage_account_https_enabled/README.md similarity index 100% rename from security/storage/azure/storage_account_https_enabled/README.md rename to security/azure/storage_account_https_enabled/README.md diff --git a/security/storage/azure/storage_account_https_enabled/azure_storage_account_https_enabled.pt b/security/azure/storage_account_https_enabled/azure_storage_account_https_enabled.pt similarity index 96% rename from security/storage/azure/storage_account_https_enabled/azure_storage_account_https_enabled.pt rename to security/azure/storage_account_https_enabled/azure_storage_account_https_enabled.pt index 0003a104f6..16409a475b 100644 --- a/security/storage/azure/storage_account_https_enabled/azure_storage_account_https_enabled.pt +++ b/security/azure/storage_account_https_enabled/azure_storage_account_https_enabled.pt @@ -1,13 +1,13 @@ name "Azure Storage Accounts Without HTTPs Enforced" rs_pt_ver 20180301 type "policy" -short_description "Checks for Azure Storage Accounts with HTTPs not enforced.\n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/storage/azure/storage_account_https_enabled) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Checks for Azure Storage Accounts with HTTPs not enforced.\n See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/azure/storage_account_https_enabled) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "low" category "Security" default_frequency "daily" info( - version: "2.6", + version: "2.7", provider: "Azure", service: "Storage Accounts", policy_set: "Storage Security" diff --git a/security/security_groups/high_open_ports/CHANGELOG.md b/security/flexera/cmp/high_open_ports/CHANGELOG.md similarity index 88% rename from security/security_groups/high_open_ports/CHANGELOG.md rename to security/flexera/cmp/high_open_ports/CHANGELOG.md index e5a77e5748..da752bc61f 100644 --- a/security/security_groups/high_open_ports/CHANGELOG.md +++ b/security/flexera/cmp/high_open_ports/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.10 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.9 - Deprecated: This policy is no longer being updated. diff --git a/security/security_groups/high_open_ports/README.md b/security/flexera/cmp/high_open_ports/README.md similarity index 100% rename from security/security_groups/high_open_ports/README.md rename to security/flexera/cmp/high_open_ports/README.md diff --git a/security/security_groups/high_open_ports/open_ports.pt b/security/flexera/cmp/high_open_ports/open_ports.pt similarity index 94% rename from security/security_groups/high_open_ports/open_ports.pt rename to security/flexera/cmp/high_open_ports/open_ports.pt index 067be8883b..3155201084 100644 --- a/security/security_groups/high_open_ports/open_ports.pt +++ b/security/flexera/cmp/high_open_ports/open_ports.pt @@ -1,15 +1,16 @@ name "Security Group with High Open Ports" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when a security group has unapproved open ports. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/security_groups/high_open_ports) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when a security group has unapproved open ports. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/flexera/cmp/high_open_ports) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Security" info( - version: "1.9", + version: "1.10", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "general_permissions" do diff --git a/security/security_groups/icmp_enabled/CHANGELOG.md b/security/flexera/cmp/icmp_enabled/CHANGELOG.md similarity index 88% rename from security/security_groups/icmp_enabled/CHANGELOG.md rename to security/flexera/cmp/icmp_enabled/CHANGELOG.md index 333e6b5664..f87e554195 100644 --- a/security/security_groups/icmp_enabled/CHANGELOG.md +++ b/security/flexera/cmp/icmp_enabled/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.11 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.10 - Deprecated: This policy is no longer being updated. diff --git a/security/security_groups/icmp_enabled/README.md b/security/flexera/cmp/icmp_enabled/README.md similarity index 100% rename from security/security_groups/icmp_enabled/README.md rename to security/flexera/cmp/icmp_enabled/README.md diff --git a/security/security_groups/icmp_enabled/icmp_enabled.pt b/security/flexera/cmp/icmp_enabled/icmp_enabled.pt similarity index 95% rename from security/security_groups/icmp_enabled/icmp_enabled.pt rename to security/flexera/cmp/icmp_enabled/icmp_enabled.pt index c5941fe014..ab079ce44e 100644 --- a/security/security_groups/icmp_enabled/icmp_enabled.pt +++ b/security/flexera/cmp/icmp_enabled/icmp_enabled.pt @@ -1,15 +1,16 @@ name "Security Groups with ICMP Enabled" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** Please refer to the cloud native version. A policy that sends email notifications a security group has icmp enabled. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/security_groups/icmp_enabled) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** Please refer to the cloud native version. A policy that sends email notifications a security group has icmp enabled. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/flexera/cmp/icmp_enabled) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Security" info( - version: "1.10", + version: "1.11", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "general_permissions" do diff --git a/security/security_groups/rules_without_descriptions/CHANGELOG.md b/security/flexera/cmp/rules_without_descriptions/CHANGELOG.md similarity index 91% rename from security/security_groups/rules_without_descriptions/CHANGELOG.md rename to security/flexera/cmp/rules_without_descriptions/CHANGELOG.md index d160bc6423..5f7b65e0d1 100644 --- a/security/security_groups/rules_without_descriptions/CHANGELOG.md +++ b/security/flexera/cmp/rules_without_descriptions/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.13 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.12 - Deprecated: This policy is no longer being updated. diff --git a/security/security_groups/rules_without_descriptions/README.md b/security/flexera/cmp/rules_without_descriptions/README.md similarity index 100% rename from security/security_groups/rules_without_descriptions/README.md rename to security/flexera/cmp/rules_without_descriptions/README.md diff --git a/security/security_groups/rules_without_descriptions/security_group_rules_without_descriptions.pt b/security/flexera/cmp/rules_without_descriptions/security_group_rules_without_descriptions.pt similarity index 94% rename from security/security_groups/rules_without_descriptions/security_group_rules_without_descriptions.pt rename to security/flexera/cmp/rules_without_descriptions/security_group_rules_without_descriptions.pt index 13960e5cfc..07e992a086 100644 --- a/security/security_groups/rules_without_descriptions/security_group_rules_without_descriptions.pt +++ b/security/flexera/cmp/rules_without_descriptions/security_group_rules_without_descriptions.pt @@ -1,15 +1,16 @@ name "Security Group Rules without Descriptions" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when a security group has no description. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/security_groups/rules_without_descriptions) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when a security group has no description. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/flexera/cmp/rules_without_descriptions) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "medium" category "Security" info( - version: "1.12", + version: "1.13", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "general_permissions" do diff --git a/security/security_groups/world_open_ports/CHANGELOG.md b/security/flexera/cmp/world_open_ports/CHANGELOG.md similarity index 81% rename from security/security_groups/world_open_ports/CHANGELOG.md rename to security/flexera/cmp/world_open_ports/CHANGELOG.md index be75ff1409..efaf3d43a6 100644 --- a/security/security_groups/world_open_ports/CHANGELOG.md +++ b/security/flexera/cmp/world_open_ports/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v1.7 + +- Updated policy metadata to ensure that it does not publish to the catalog + ## v1.6 - Deprecated: This policy is no longer being updated. diff --git a/security/security_groups/world_open_ports/README.md b/security/flexera/cmp/world_open_ports/README.md similarity index 100% rename from security/security_groups/world_open_ports/README.md rename to security/flexera/cmp/world_open_ports/README.md diff --git a/security/security_groups/world_open_ports/security_group_rules_with_world_open_ports.pt b/security/flexera/cmp/world_open_ports/security_group_rules_with_world_open_ports.pt similarity index 97% rename from security/security_groups/world_open_ports/security_group_rules_with_world_open_ports.pt rename to security/flexera/cmp/world_open_ports/security_group_rules_with_world_open_ports.pt index 299f9b0136..0495ade8c1 100644 --- a/security/security_groups/world_open_ports/security_group_rules_with_world_open_ports.pt +++ b/security/flexera/cmp/world_open_ports/security_group_rules_with_world_open_ports.pt @@ -1,15 +1,16 @@ name "Security Group Rules with ports open to the world" rs_pt_ver 20180301 type "policy" -short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when a security group has ports open to the world. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/security_groups/world_open_ports) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "**Deprecated: This policy is no longer being updated.** A policy that sends email notifications when a security group has ports open to the world. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/flexera/cmp/world_open_ports) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" severity "high" category "Security" info( - version: "1.6", + version: "1.7", provider: "Flexera Cloud Management", service: "", - policy_set: "" + policy_set: "", + publish: "false" ) permission "general_permissions" do diff --git a/security/storage/google/public_buckets/CHANGELOG.md b/security/google/public_buckets/CHANGELOG.md similarity index 95% rename from security/storage/google/public_buckets/CHANGELOG.md rename to security/google/public_buckets/CHANGELOG.md index 181389ef43..50cb05ca84 100644 --- a/security/storage/google/public_buckets/CHANGELOG.md +++ b/security/google/public_buckets/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## v3.1 + +- fixed link to README in policy description + ## v3.0 - Fixed issue where some open buckets were not being reported on diff --git a/security/storage/google/public_buckets/README.md b/security/google/public_buckets/README.md similarity index 100% rename from security/storage/google/public_buckets/README.md rename to security/google/public_buckets/README.md diff --git a/security/storage/google/public_buckets/google_public_buckets.pt b/security/google/public_buckets/google_public_buckets.pt similarity index 98% rename from security/storage/google/public_buckets/google_public_buckets.pt rename to security/google/public_buckets/google_public_buckets.pt index 94e4156fd8..2306aca7f0 100644 --- a/security/storage/google/public_buckets/google_public_buckets.pt +++ b/security/google/public_buckets/google_public_buckets.pt @@ -1,13 +1,13 @@ name "Google Open Buckets" rs_pt_ver 20180301 type "policy" -short_description "Checks for Google Cloud Storage buckets that are open to the public. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/storage/google/public_buckets) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." +short_description "Checks for Google Cloud Storage buckets that are open to the public. See the [README](https://github.com/flexera-public/policy_templates/tree/master/security/google/public_buckets) and [docs.flexera.com/flexera/EN/Automation](https://docs.flexera.com/flexera/EN/Automation/AutomationGS.htm) to learn more." long_description "" category "Security" severity "high" default_frequency "daily" info( - version: "3.0", + version: "3.1", provider: "Google", service: "Storage", policy_set: "Open Buckets" diff --git a/security/storage/google/public_buckets/google_public_buckets_meta_parent.pt b/security/google/public_buckets/google_public_buckets_meta_parent.pt similarity index 99% rename from security/storage/google/public_buckets/google_public_buckets_meta_parent.pt rename to security/google/public_buckets/google_public_buckets_meta_parent.pt index 729320ed58..93632dfa62 100644 --- a/security/storage/google/public_buckets/google_public_buckets_meta_parent.pt +++ b/security/google/public_buckets/google_public_buckets_meta_parent.pt @@ -1,14 +1,14 @@ name "Google Open Buckets Meta Parent" rs_pt_ver 20180301 type "policy" -short_description "Applies and manages \"child\" [Google Open Buckets](https://github.com/flexera-public/policy_templates/tree/master/security/storage/google/public_buckets) Policies." +short_description "Applies and manages \"child\" [Google Open Buckets](https://github.com/flexera-public/policy_templates/tree/master/security/google/public_buckets) Policies." severity "low" category "Cost" tenancy "single" default_frequency "15 minutes" info( provider: "Google", - version: "3.0", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability + version: "3.1", # This version of the Meta Parent Policy Template should match the version of the Child Policy Template as it appears in the Catalog for best reliability publish: "false" ) diff --git a/tools/meta_parent_policy_compiler/meta_parent_policy_compiler.rb b/tools/meta_parent_policy_compiler/meta_parent_policy_compiler.rb index 8fca37e7a4..436b5e210e 100644 --- a/tools/meta_parent_policy_compiler/meta_parent_policy_compiler.rb +++ b/tools/meta_parent_policy_compiler/meta_parent_policy_compiler.rb @@ -31,7 +31,7 @@ "../../operational/aws/tag_cardinality/aws_tag_cardinality.pt", "../../security/aws/ebs_unencrypted_volumes/aws_unencrypted_volumes.pt", "../../security/aws/rds_publicly_accessible/aws_publicly_accessible_rds_instances.pt", - "../../security/storage/aws/public_buckets/aws_public_buckets.pt", + "../../security/aws/public_buckets/aws_public_buckets.pt", # Azure Policy Templates "../../compliance/azure/azure_untagged_vms/untagged_vms.pt", "../../compliance/azure/azure_untagged_resources/untagged_resources.pt", @@ -72,7 +72,7 @@ "../../cost/google/schedule_instance/google_schedule_instance.pt", "../../cost/google/cud_recommendations/google_committed_use_discount_recommendations.pt", "../../cost/google/old_snapshots/google_delete_old_snapshots.pt", - "../../security/storage/google/public_buckets/google_public_buckets.pt" + "../../security/google/public_buckets/google_public_buckets.pt" ] # Compile Meta Parent Policy Definition diff --git a/tools/policy_master_permission_generation/validated_policy_templates.yaml b/tools/policy_master_permission_generation/validated_policy_templates.yaml index 53e494b5f6..fa87bc0d04 100644 --- a/tools/policy_master_permission_generation/validated_policy_templates.yaml +++ b/tools/policy_master_permission_generation/validated_policy_templates.yaml @@ -80,10 +80,11 @@ validated_policy_templates: - "./cost/google/rightsize_vm_recommendations/google_rightsize_vm_recommendations.pt" - "./cost/google/schedule_instance/google_schedule_instance.pt" - "./cost/google/cloud_run_anomaly_detection/google_cloud_run_anomaly_detection.pt" -- "./security/storage/google/public_buckets/google_public_buckets.pt" +- "./security/google/public_buckets/google_public_buckets.pt" # Flexera - "./automation/flexera/delete_all_billing_centers/delete_all_billing_centers.pt" - "./automation/flexera/outdated_applied_policies/outdated_applied_policies.pt" -- "./cost/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt" -- "./cost/budget_v_actual_spend_report/budget_v_actual_spend_report.pt" -- "./cost/budget_v_actual/monthly_budget_v_actual.pt" +- "./compliance/flexera/cco/billing_center_access_report/bc_access_report.pt" +- "./cost/flexera/cco/cloud_cost_anomaly_alerts/cloud_cost_anomaly_alerts.pt" +- "./cost/flexera/cco/budget_v_actual_spend_report/budget_v_actual_spend_report.pt" +- "./cost/flexera/cco/budget_v_actual/monthly_budget_v_actual.pt"