Trying to define a policy for Gated Deployments th...
# general
a
Trying to define a policy for Gated Deployments that relates AWS S3 BucketPublicAccessBlocks to Buckets. Haven't been able to figure out a way to check that a BucketPublicAccessBlock exists for each bucket. Tried to get instances of publicAccessBlocks and compare bucket ids too, but I don't think it works.
m
Hi Travis, I don't think it's possible to implement this policy with what we've released currently, but we are actively working on https://github.com/pulumi/pulumi-policy/issues/105 which will enable checking all resources in the stack.
a
Cool! Thanks.