Validate section

gistfile1.txt

(custodian) vagrant@sliong:/workspace/custodian$ custodian validate test.yml
2017-05-05 21:32:41,128: custodian.commands:ERROR Configuration invalid: test.yml
2017-05-05 21:32:41,136: custodian.commands:ERROR {'filters': [{'tag:Owner': 'absent'}], 'name': 'ec2-auto-tag-owner', 'actions': [{'tag': 'OwnerContact', 'type': 'auto-tag-user'}], 'mode': {'type': 'cloud-trail', 'events': ['CreateInstance']}} is not valid under any of the given schemas

Failed validating 'anyOf' in schema['properties']['policies']['items']:
    {'anyOf': [{'$ref': '#/definitions/resources/firehose/policy'},
               {'$ref': '#/definitions/resources/rds-cluster-snapshot/policy'},
               {'$ref': '#/definitions/resources/event-rule/policy'},
               {'$ref': '#/definitions/resources/elb/policy'},
               {'$ref': '#/definitions/resources/redshift-snapshot/policy'},
               {'$ref': '#/definitions/resources/rds-subnet-group/policy'},
               {'$ref': '#/definitions/resources/route-table/policy'},
               {'$ref': '#/definitions/resources/internet-gateway/policy'},
               {'$ref': '#/definitions/resources/ami/policy'},
               {'$ref': '#/definitions/resources/cache-cluster/policy'},
               {'$ref': '#/definitions/resources/kinesis/policy'},
               {'$ref': '#/definitions/resources/network-acl/policy'},
               {'$ref': '#/definitions/resources/snowball/policy'},
               {'$ref': '#/definitions/resources/support-case/policy'},
               {'$ref': '#/definitions/resources/ml-model/policy'},
               {'$ref': '#/definitions/resources/network-addr/policy'},
               {'$ref': '#/definitions/resources/asg/policy'},
               {'$ref': '#/definitions/resources/emr/policy'},
               {'$ref': '#/definitions/resources/kinesis-analytics/policy'},
               {'$ref': '#/definitions/resources/iam-user/policy'},
               {'$ref': '#/definitions/resources/cfn/policy'},
               {'$ref': '#/definitions/resources/vpn-gateway/policy'},
               {'$ref': '#/definitions/resources/dynamodb-stream/policy'},
               {'$ref': '#/definitions/resources/app-elb/policy'},
               {'$ref': '#/definitions/resources/ec2/policy'},
               {'$ref': '#/definitions/resources/ebs/policy'},
               {'$ref': '#/definitions/resources/storage-gateway/policy'},
               {'$ref': '#/definitions/resources/rds-cluster/policy'},
               {'$ref': '#/definitions/resources/hsm-client/policy'},
               {'$ref': '#/definitions/resources/opswork-stack/policy'},
               {'$ref': '#/definitions/resources/kms/policy'},
               {'$ref': '#/definitions/resources/log-group/policy'},
               {'$ref': '#/definitions/resources/hostedzone/policy'},
               {'$ref': '#/definitions/resources/rds-subscription/policy'},
               {'$ref': '#/definitions/resources/hsm/policy'},
               {'$ref': '#/definitions/resources/identity-pool/policy'},
               {'$ref': '#/definitions/resources/ecr/policy'},
               {'$ref': '#/definitions/resources/codebuild/policy'},
               {'$ref': '#/definitions/resources/directconnect/policy'},
               {'$ref': '#/definitions/resources/distribution/policy'},
               {'$ref': '#/definitions/resources/rds/policy'},
               {'$ref': '#/definitions/resources/key-pair/policy'},
               {'$ref': '#/definitions/resources/app-elb-target-group/policy'},
               {'$ref': '#/definitions/resources/elasticsearch/policy'},
               {'$ref': '#/definitions/resources/ecs/policy'},
               {'$ref': '#/definitions/resources/iam-group/policy'},
               {'$ref': '#/definitions/resources/batch-compute/policy'},
               {'$ref': '#/definitions/resources/redshift/policy'},
               {'$ref': '#/definitions/resources/vpn-connection/policy'},
               {'$ref': '#/definitions/resources/iam-role/policy'},
               {'$ref': '#/definitions/resources/batch-definition/policy'},
               {'$ref': '#/definitions/resources/dynamodb-table/policy'},
               {'$ref': '#/definitions/resources/hsm-hapg/policy'},
               {'$ref': '#/definitions/resources/waf/policy'},
               {'$ref': '#/definitions/resources/shield-protection/policy'},
               {'$ref': '#/definitions/resources/cache-subnet-group/policy'},
               {'$ref': '#/definitions/resources/snowball-cluster/policy'},
               {'$ref': '#/definitions/resources/iam-profile/policy'},
               {'$ref': '#/definitions/resources/vpc/policy'},
               {'$ref': '#/definitions/resources/codepipeline/policy'},
               {'$ref': '#/definitions/resources/step-machine/policy'},
               {'$ref': '#/definitions/resources/account/policy'},
               {'$ref': '#/definitions/resources/security-group/policy'},
               {'$ref': '#/definitions/resources/rest-api/policy'},
               {'$ref': '#/definitions/resources/acm-certificate/policy'},
               {'$ref': '#/definitions/resources/customer-gateway/policy'},
               {'$ref': '#/definitions/resources/codecommit/policy'},
               {'$ref': '#/definitions/resources/gamelift-fleet/policy'},
               {'$ref': '#/definitions/resources/opswork-cm/policy'},
               {'$ref': '#/definitions/resources/simpledb/policy'},
               {'$ref': '#/definitions/resources/waf-regional/policy'},
               {'$ref': '#/definitions/resources/cloudtrail/policy'},
               {'$ref': '#/definitions/resources/cache-snapshot/policy'},
               {'$ref': '#/definitions/resources/cloudsearch/policy'},
               {'$ref': '#/definitions/resources/rrset/policy'},
               {'$ref': '#/definitions/resources/peering-connection/policy'},
               {'$ref': '#/definitions/resources/streaming-distribution/policy'},
               {'$ref': '#/definitions/resources/s3/policy'},
               {'$ref': '#/definitions/resources/eni/policy'},
               {'$ref': '#/definitions/resources/efs/policy'},
               {'$ref': '#/definitions/resources/redshift-subnet-group/policy'},
               {'$ref': '#/definitions/resources/iam-certificate/policy'},
               {'$ref': '#/definitions/resources/gamelift-build/policy'},
               {'$ref': '#/definitions/resources/user-pool/policy'},
               {'$ref': '#/definitions/resources/rds-snapshot/policy'},
               {'$ref': '#/definitions/resources/shield-attack/policy'},
               {'$ref': '#/definitions/resources/launch-config/policy'},
               {'$ref': '#/definitions/resources/subnet/policy'},
               {'$ref': '#/definitions/resources/sqs/policy'},
               {'$ref': '#/definitions/resources/healthcheck/policy'},
               {'$ref': '#/definitions/resources/kms-key/policy'},
               {'$ref': '#/definitions/resources/sns/policy'},
               {'$ref': '#/definitions/resources/iam-policy/policy'},
               {'$ref': '#/definitions/resources/ebs-snapshot/policy'},
               {'$ref': '#/definitions/resources/health-event/policy'},
               {'$ref': '#/definitions/resources/alarm/policy'},
               {'$ref': '#/definitions/resources/glacier/policy'},
               {'$ref': '#/definitions/resources/directory/policy'},
               {'$ref': '#/definitions/resources/lambda/policy'}]}

On instance['policies'][0]:
    {'actions': [{'tag': 'OwnerContact', 'type': 'auto-tag-user'}],
     'filters': [{'tag:Owner': 'absent'}],
     'mode': {'events': ['CreateInstance'], 'type': 'cloud-trail'},
     'name': 'ec2-auto-tag-owner'}
2017-05-05 21:32:41,140: custodian.commands:ERROR ec2-auto-tag-owner