cloud-custodian / cloud-custodian/cloud-custodian
Support for AWS Systems Manager - Session Manager
- Dominant language
- Python
- Stars
- 6.1k
- Forks
- 1.6k
- Avg merge
- 3d 7h
- Merged PRs (30d)
- 15
Description
### Describe the feature
There is no support for ssm-session (AWS Systems Manager - Session Manager). I would like to have a custodian policy to ensure the session preferences configurations is set per policy and any violation is flagged and remediated by the custodian policy. Currently only below SSM are supported.
- aws.ssm-activation
- aws.ssm-data-sync
- aws.ssm-document
- aws.ssm-managed-instance
- aws.ssm-parameter
Steps in AWS Console
1. Login to AWS console
2. Systems Manager --> Session Manager --> Preference
3. Check if S3 logging is enabled. If not enabled, flag the session as non-compliant.
### Extra information or context
_No response_
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the existing SSM resource implementations for aws.ssm-activation, aws.ssm-data-sync, aws.ssm-document, aws.ssm-managed-instance, and aws.ssm-parameter, then compare them with AWS Systems Manager Session Manager preferences. Done means a custodian policy can inspect whether S3 logging is enabled and flag or remediate non-compliant preferences.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, python
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100