Resource Management:Use regular expressions to ensure tag value compliance

Procedure

Regular expressions work with tag policies for both the current account and a resource directory. The following example creates a current-account tag policy that requires all resources to carry a tag with the key staffNumber whose value contains only digits.

1. Log on to the Resource Management console.

2. Create a tag policy.

   1. In the left-side navigation pane, choose Tag Policy > Policy Library.

   2. On the Policy Library page, click Create Tag Policy.

   3. Enter a policy name.

   4. Enter a policy description.

   5. Use the Quick Mode tab to configure the policy.

      1. Select Match Tag Values with Specified Regular Expression for the Policy Scenario.

      2. In the Tag Key field, enter staffNumber.

      3. In the Specify Allowed Tag Values field, enter the regular expression.

         For this example, enter ^[0-9]+$. This expression requires the tag value to contain only digits.

      4. In the Policy Execution Mode section, Post-event Detection is selected by default. You can also configure other settings, such as the resource type, resource group, region, tag, and a regular expression for resource names. You can also enable Automatic Remediation.

         For this example, leave the default settings unchanged.

   6. Click Create.

3. Attach the tag policy.

   Attach the tag policy that you created in Step 2 to the current account. Once attached, the policy applies to the account and all its RAM users. For more information, see Attach a tag policy.

4. View the effective policy.

   An effective policy aggregates all tag policies attached to the current account. For more information, see View an effective policy.

5. After the detection task is complete, view the results.

   The system automatically detects resources that are missing the staffNumber tag key. It also detects resources whose tag value does not match the regular expression. For example, a resource with the tag staffNumber:alice is flagged as non-compliant.

   You can view or download the detection results for non-compliant resources. For details, see View and download non-compliance detection results.

Next steps

Remediate non-compliant tags manually or by enabling automatic remediation in the tag policy. For more information, see Use a tag policy for automatic remediation.