Presets¶
It might be the case that some filters are the same across multiple accounts. This especially could happen, if provisioning tools like Terraform are used or if IAM resources follow the same pattern.
For this case gcp-nuke supports presets of filters, that can applied on multiple accounts.
Presets
are defined globally. They can then be referenced in the accounts
section of the configuration.
A preset configuration could look like this:
presets:
common:
filters:
IAMAccountSettingPasswordPolicy:
- custom
IAMRole:
- "OrganizationAccountAccessRole"
An account referencing a preset would then look something like this:
accounts:
playground-12345:
presets:
- common
Putting it all together it would look something like this:
blocklist:
- 0012345678
regions:
- global
- us-east-1
accounts:
1234567890:
presets:
- common
presets:
common:
filters:
IAMAccountSettingPasswordPolicy:
- custom
IAMRole:
- OrganizationAccountAccessRole