policy.json

{
   "Policies":[
      {
         "template":"Tag checker policy",
         "description": "Find and report/alert on Missing or invalid tags"
      },
      {
         "template":"Scheduler",
         "description": "nill"
      },
      {
         "template":"Instance checker",
         "description": "Based on utilization criteria. Stop instance, change size, restart. Assume this only works with RL installed."
      },
      {
         "template":"Default",
         "description": "nill"
      },
      {
         "template":"RI default",
         "description": "Can we leverage the API used for the new RI report in the product? Eng to check and get back to us. What about Azure?"
      },
      {
         "template":"S3 policy default",
         "description": "Shows this across multiple clouds (atleast AWS S3 and Azure Blob Storage and if possible, Google Cloud Storage) . Bart will see if there is other types of storage to consider."
      },
      {
         "template":"Account checker default",
         "description": "Check for keyparameters on each provider account/subscription/project:examples could include: Password aging enabled, Multi-factor authentication enabled, SSO enabled, etc."
      },
      {
         "template":"Security groups default",
         "description":"If any Security Group has an rule with an Open ICMP Ingress Source Range, allow all traffic for types: 0, 3, 8, then send email notification, modify Security Group rules. Can we do equivalent as multi-cloud."
      },
      {
         "template":"Billing Default",
         "description": "Alert if coverage level exceeds certain thresholds? Would need to access the Cost Explorer API"
      }
   ]
}