Presets

It might be the case that some filters are the same across multiple accounts. This especially could happen, if provisioning tools like Terraform are used or if IAM resources follow the same pattern.

For this case aws-nuke supports presets of filters, that can applied on multiple accounts.

Presets are defined globally. They can then be referenced in the accounts section of the configuration.

A preset configuration could look like this:

presets:
  common:
    filters:
      IAMAccountSettingPasswordPolicy:
        - custom
      IAMRole:
        - "OrganizationAccountAccessRole"

An account referencing a preset would then look something like this:

accounts:
  1234567890:
    presets:
      - common

Putting it all together it would look something like this:

blocklist:
  - 0012345678

regions:
  - global
  - us-east-1

accounts:
  1234567890:
    presets:
      - common

presets:
  common:
    filters:
      IAMAccountSettingPasswordPolicy:
        - custom
      IAMRole:
        - OrganizationAccountAccessRole