new: added policy ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances

Author: anna-shcherbak

policies/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances.yml

@@ -0,0 +1,17 @@
+# Copyright (c) 2023 EPAM Systems, Inc.
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+
+policies:
+  - name: ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances
+    comment: '010002042000'
+    description: |
+      EBS volumes attached to stopped EC2 instances
+    resource: aws.ebs
+    filters:
+      - type: instance
+        key: State.Name
+        value: stopped

terraform/ecc-aws-553-unused_clb/green/ec2.tf

@@ -4,7 +4,6 @@ resource "aws_instance" "this" {
   user_data              = file("userdata.sh")
   vpc_security_group_ids = ["${aws_security_group.this.id}"]
   subnet_id              = data.aws_subnets.this.ids[0]
-  key_name = "anna_shcherbak_key"
   tags = {
     Name = "553_instance_green"
   }

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/green/ec2.tf

@@ -0,0 +1,29 @@
+resource "aws_instance" "this" {
+  ami           = data.aws_ami.this.id
+  instance_type = "t2.micro"
+  subnet_id     = data.aws_subnets.this.ids[0]
+  tags = {
+    Name = "575_instance_green"
+  }
+}
+
+data "aws_ami" "this" {
+  most_recent = true
+  owners      = ["amazon"]
+
+  filter {
+    name   = "name"
+    values = ["amzn2-ami-hvm*"]
+  }
+}
+
+data "aws_vpc" "default" {
+  default = true
+}
+
+data "aws_subnets" "this" {
+  filter {
+    name   = "vpc-id"
+    values = [data.aws_vpc.default.id]
+  }
+}

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/green/provider.tf

@@ -0,0 +1,20 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 4"
+    }
+  }
+}
+
+provider "aws" {
+  profile = var.profile
+  region  = var.default-region
+
+  default_tags {
+    tags = {
+      CustodianRule    = "ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances"
+      ComplianceStatus = "Green"
+    }
+  }
+}

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/green/terraform.tfvars

@@ -0,0 +1,2 @@
+profile        = "c7n"
+default-region = "us-east-1"

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/green/variables.tf

@@ -0,0 +1,9 @@
+variable "default-region" {
+  type        = string
+  description = "Default region for resources will be created"
+}
+
+variable "profile" {
+  type        = string
+  description = "Profile name configured before running apply"
+}

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/iam/575-policy.json

@@ -0,0 +1,13 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "ec2:DescribeInstances",
+                "ec2:DescribeVolumes"
+            ],
+            "Resource": "*"
+        }
+    ]
+}

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/red/ec2.tf

@@ -0,0 +1,37 @@
+resource "aws_instance" "this" {
+  ami           = data.aws_ami.this.id
+  instance_type = "t2.micro"
+  subnet_id     = data.aws_subnets.this.ids[0]
+  tags = {
+    Name = "575_instance_red"
+  }
+}
+
+resource "aws_ec2_instance_state" "this" {
+  instance_id = aws_instance.this.id
+  state       = "stopped"
+}
+
+data "aws_ami" "this" {
+  most_recent = true
+  owners      = ["amazon"]
+
+  filter {
+    name   = "name"
+    values = ["amzn2-ami-hvm*"]
+  }
+}
+
+data "aws_vpc" "default" {
+  default = true
+}
+
+data "aws_subnets" "this" {
+  filter {
+    name   = "vpc-id"
+    values = [data.aws_vpc.default.id]
+  }
+}
+
+
+

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/red/provider.tf

@@ -0,0 +1,20 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 4"
+    }
+  }
+}
+
+provider "aws" {
+  profile = var.profile
+  region  = var.default-region
+
+  default_tags {
+    tags = {
+      CustodianRule    = "ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances"
+      ComplianceStatus = "Red"
+    }
+  }
+}

terraform/ecc-aws-575-ebs_volumes_attached_to_stopped_ec2_instances/red/terraform.tfvars

@@ -0,0 +1,2 @@
+profile        = "c7n"
+default-region = "us-east-1"