All Products
Search
Document Center

Cloud Config:matched-tag

Last Updated:Nov 17, 2023

Checks whether a tag of a resource that belongs to a supported resource type matches the specified regular expression for tags in key-value pairs. If so, the evaluation result is Compliant. You can specify a regular expression for tag keys.

Scenarios

Tags are used in regular resource management scenarios, such as permission isolation, bill splitting, and automatic O&M. This rule supports the key-value pairs of regular expressions and is suitable for enterprises and users who have standardized management of tag formats.

Risk level

Default risk level: high.

When you apply this rule, you can change the risk level based on your business requirements.

Compliance evaluation logic

  • If a tag of a resource that belongs to a supported resource type matches the specified regular expression for tags in key-value pairs, the evaluation result is Compliant.

  • If a tag of a resource that belongs to a supported resource type does not match the specified regular expression for tags in key-value pairs, the evaluation result is Non-compliant.

Rule details

Item

Description

Rule name

matched-tag

Rule ID

matched-tag

Tag

Tag

Automatic remediation

Support for ACS-TAG-TagResources

Trigger type

Configuration change

Supported resource type

  • ECS dedicated host

  • ECS disk

  • ECS instance

  • ECS launch template

  • ECS elastic network interface

  • ECS security group

  • ECS snapshot

  • ApsaraDB RDS instance

  • CEN instance

  • Apsara File Storage NAS file system

  • OSS bucket

  • PolarDB cluster

  • SLB instance

  • VPC route table

  • VPC

  • vSwitch

  • ApsaraDB for Redis instance

  • ApsaraDB for MongoDB instance

  • ApsaraDB for HBase cluster

  • Anti-DDoS instance

  • KMS CMK

  • KMS secret

  • ACK cluster

  • EIP

  • NAT gateway

  • Endpoint service

  • Endpoint

  • API group

  • API resource

  • Application

  • Encryption parameter

  • Parameter

  • Template

  • Accelerated domain name

  • ApsaraMQ for Kafka instance

  • Consumer group

  • Topic

  • Express Connect circuit

  • AnalyticDB for PostgreSQL instance

  • CDN domain name

  • Member account

Input parameter

tagKeyRegex

Non-compliance remediation

Ensure that a tag of a resource that belongs to a supported resource type matches the specified regular expression for tags in key-value pairs. For more information, see Add a custom tag.