pruneops_disabled_findings (Resource)¶

The findings the analysis does NOT emit for the organization (one per organization: declare it once); every other finding is enabled. Disabling a finding removes its active recommendations. Destroying it enables every finding. Keys: the pruneops_findings data source.

Example Usage¶

# One per organization: every finding not listed is enabled.
resource "pruneops_disabled_findings" "this" {
  findings = [
    "aws:cloudwatch:log_group#set_retention",
    "aws:dynamodb:table#switch_to_on_demand",
  ]
}

Schema¶

Required¶

findings (Set of String) Finding keys, "#" (e.g. aws:cloudwatch:log_group#delete).

Read-Only¶

id (String) Always "organization".

Import¶

Import is supported using the following syntax:

The terraform import command can be used, for example:

terraform import pruneops_disabled_findings.this organization