Writing new rules and logging data

[lfc314]

❔ Question

When writing a new rule (for example EBS), what's the best way to log and check data from the specific services or volumes

🔦 Context

When checking EBS volume data, how would you be able to check if encryption is true/false?

💻 Code Sample

Example: In your rule UnderutilizedAmazonEBSVolumesRule, the EBS volume data is assigned as infoFromTa.

Do you have any documentation on how this data looks? Thank you.

[santhoshigorle]

@lfc314 in your volume data you will have field encrypted. using that field you will able to do the validation
"encrypted": "false"