alphabetised nuke common filters, added new filters for elasticache a…

…nd opensearch
ministryofjustice · Jul 15, 2024 · 5d7bd68 · 5d7bd68
1 parent 1bc0064
commit 5d7bd68
Showing 1 changed file with 26 additions and 19 deletions.
diff --git a/scripts/nuke-config-template.txt b/scripts/nuke-config-template.txt
@@ -69,49 +69,56 @@ $accounts_str
 presets:
   common:
     filters:
+      AccessAnalyzer:
+        - property: tag:component
+          value: "secure-baselines"
       AWSBackupPlan:
         - property: tag:component
           value: "secure-baselines"
       AWSBackupVault:
         - property: tag:component
           value: "secure-baselines"
-      EC2RouteTable:
+      ConfigServiceConfigRule:
+        - type: glob
+          value: "securityhub-*"
+        - type: glob
+          value: "FMManagedShieldConfigRule*"
+      EC2DHCPOption:
         - property: tag:component
           value: "secure-baselines"
-      EC2VPC:
-        - property: tag:component
+      EC2InternetGatewayAttachment:
+        - property: tag:vpc:component
           value: "secure-baselines"
       EC2NetworkACL:
         - property: tag:component
           value: "secure-baselines"
-      KMSKey:
-        - property: tag:component
-          value: "secure-baselines"
-      S3Bucket:
+      EC2RouteTable:
         - property: tag:component
           value: "secure-baselines"
-      EC2InternetGatewayAttachment:
-        - property: tag:vpc:component
-          value: "secure-baselines"
-      AccessAnalyzer:
+      EC2SecurityGroup:
         - property: tag:component
           value: "secure-baselines"
-      SNSTopic:
+      EC2VPC:
         - property: tag:component
           value: "secure-baselines"
-      EC2SecurityGroup:
+      ElasticacheCacheParameterGroup:
+        - type: glob
+          value: "default.*"
+      KMSKey:
         - property: tag:component
           value: "secure-baselines"
-      EC2DHCPOption:
+      OSPackage:
+        - property: Packagename
+          type: regex
+          value: "^(opensearch-)?analysis-.+$"
+      S3Bucket:
         - property: tag:component
           value: "secure-baselines"
       SSMParameter:
         - property: tag:component
           value: "delegate-access"
         - property: tag:component
           value: "member-bootstrap"
-      ConfigServiceConfigRule:
-        - type: glob
-          value: "securityhub-*"
-        - type: glob
-          value: "FMManagedShieldConfigRule*"
+      SNSTopic:
+        - property: tag:component
+          value: "secure-baselines"