public-subnet-instance-audit-lambda.yml

policies:
  - name: subnet-audit 
    resource: ec2 
    description: |
      Filter ec2 resources based on the attributes of the network
      they are attached to then take action. For example, subnets with tag 'Location'
      and value that matches 'Internet' should be stopped.
    mode:
      type: ec2-instance-state 
      role: arn:aws:iam::485020822820:role/CloudCustodianRole
      events: 
        - pending 
    filters:
      - type: subnet 
        key: "tag:Location"
        value: "Internet" 
    actions:
      - stop