Policy execution time

[Rafael Solo]

Trying to get this system setup in our production environment.

I have setup a policy if my TagSet does not match X, shutdown in 1 day.

The tag response however puts out this: "Resource does not meet policy: stop@2018/04/04"

Is that telling me that the instance will be shutdown at the beginning of the day? Or will it actually shutdown in 24 hours?

[Kapil Thangavelu]

It depends on when your running custodian, ie. typically we would cron it every hour, but basically any execution of the shutdown policy (using marked-for-op filter on stop) will act on the resource starting at that date. There is also a skew option on the marked-for-op filter so you can do things like send a final notification to the resource owner in advance of the stop, ie the skew lets it match in advance of that date. In general these types of policies are done as three separate policies a 'mark' policy, a 'sweep' policy that finds resources now compliant that were marked and cleans up the tag, and then a separate 'collect' policy that verifies initial conditions and takes the marked for action.

Cheers,

Kapil

[Neel Desai]

Where can I find in documentation about explanation on actions like "marked-for-op", "mark-for-op"(I know about this),"skew" & and other similar to this? Like, where can I find a complete list of actions & vocabularies in documentation?

[Kapil Thangavelu]

there are reference docs for each provider on the website

https://cloudcustodian.io/docs/aws/resources/index.html