The output of asset governance rule contains separate evaluation URLs instead of consolidated data of all regions and accounts
long-term
H
High Ant
I am trying to get a list of ec2 instances based on a certain filter for 150+ accounts over several regions. The "test output" terminal gives URLs to evaluations for each region and each account instead of a consolidated output that we can download.
This causes us to go through hundreds or even thousands of separate evaluations just for running one governance rule. We would like to have an aggregated response in the output terminal that we can directly download instead of going through several hundreds of evaluations and download separate output file for each.
Log In
Canny AI
Merged in a post:
Asset Gov rule dry run lists all resources it finds, not just affected ones
A
Artificial Narwhal
When performing a dry run on an Asset Governance rule the results will show any resource that
could
be affected, rather than showing just the ones that are
affected, forcing me to click into each resource link to see if the rule applies to it.For instance, if I run the Asset Governance Rule "ec2-unoptimized-ebs", and ask it do a dry run against 30 AWS accounts, the results will have a link to all 30 AWS accounts regardless if they all had unoptimized ebs volumes found. So I would need to click into all 30 of them to see if resources were actually found. The desired behavior is to only show the resources that would actually be affected, otherwise there is a lot of wasted time.
Rohit Reddy
Hey Artificial Narwhal, we have an option on the Evaluation section to add a quick filter on evaluations with resource count > 0 to quickly show you the accounts which have been optimisation opportunities. Happy to jump on a call and talk through Asset Governance.
Rohit Reddy
long-term
Rohit Reddy
Thank you High Ant for your feedback. We plan to expose policy evaluation data in Custom Dashboards, allowing you to query and create visualizations across accounts post aggregations with other advanced options like reporting, alerting, and global filtering.