MrHassanMurtaza · January 30, 2020 08:47
diff --git a/Deny_If_No_Purpose_Tag.json b/Deny_If_No_Purpose_Tag.json
 {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "NoPurposeTag",
            "Effect": "Deny",
            "Action": [
                "ec2:RunInstances",
                "ec2:CreateVolume"
            ],
            "Condition": {
                "ForAllValues:StringNotEquals": {
                    "aws:TagKeys": [
                        "Purpose"
                    ]
                }
            },
            "Resource": [
                "arn:aws:ec2:*:*:volume/*",
                "arn:aws:ec2:*:*:instance/*"
            ]
        }
    ]
 }
	{
	"Version": "2012-10-17",
	"Statement": [
	{
	"Sid": "NoPurposeTag",
	"Effect": "Deny",
	"Action": [
	"ec2:RunInstances",
	"ec2:CreateVolume"
	],
	"Condition": {
	"ForAllValues:StringNotEquals": {
	"aws:TagKeys": [
	"Purpose"
	]
	}
	},
	"Resource": [
	"arn:aws:ec2:::volume/*",
	"arn:aws:ec2:::instance/*"
	]
	}
	]
	}