AWS License Manager

awsPolicy engineaws-license-manager

Tracks software entitlements against deployed resources, counting by vCPU, core, socket or instance.

Provider
aws
Category
Operations
Properties · 3 set by this component
propertytypevaluesrequiredkind defaultthis component
crossAccount · component propertyboolean—nofalseinherited
effectenumaudit | deny | modify | deploy-if-not-existsno—inherited
enforceLicenseLimit · component propertyboolean—no—inherited
enforcementModeenumenforced | disabledno—inherited
licenseCountingType · component propertyenumvcpu | core | socket | instanceno—inherited
managedboolean—nofalse▸ true
policyCountinteger—no—inherited
remediationboolean—nofalse▸ false
scopeenumresource | group | account | organizationno—▸ account
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "license-manager", component: "aws-license-manager" }
Other Policy engine products · 56
Cloud Configalibaba-cloud-configalibabacloudpolicy-engineData Security Centeralibaba-data-security-centeralibabacloudpolicy-engineAmazon CodeGuru Revieweraws-codeguru-reviewerawspolicy-engineAWS Configaws-configawspolicy-engineAWS Control Toweraws-control-towerawspolicy-engineIAM Access Analyzeraws-iam-access-analyzerawspolicy-engineAWS Lake Formationaws-lake-formationawspolicy-engineAWS Organizationsaws-organizationsawspolicy-engineAWS Resource Access Manageraws-ramawspolicy-engineAmazon Verified Permissionsaws-verified-permissionsawspolicy-engineMicrosoft Entra Conditional Accessazure-conditional-accessazurepolicy-engineAzure Policyazure-policyazurepolicy-engineMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementazurepolicy-engineCloudflare Data Loss Preventioncloudflare-dlpcloudflarepolicy-engineCalypsoAIcalypsoaipolicy-engineCerboscerbospolicy-engineOPA Gatekeepergatekeeperpolicy-engineGuardrails AIguardrails-aipolicy-engineHiddenLayer AI Security Platformhiddenlayerpolicy-engineKubeArmorkubearmorpolicy-engineKubewardenkubewardenpolicy-engineKyvernokyvernopolicy-engineLakera Guardlakera-guardpolicy-engineLLM Guardllm-guardpolicy-engineNeMo Guardrailsnemo-guardrailspolicy-engineOpen Policy Agentopapolicy-enginePermit.iopermit-iopolicy-engineGeneric policy enginepolicy-enginepolicy-enginePrompt Securityprompt-securitypolicy-engineProtect AIprotect-aipolicy-engineRebuffrebuffpolicy-engineRobust Intelligencerobust-intelligencepolicy-engineSonarQube Serversonarqubepolicy-engineDigitalOcean CSPMdigitalocean-cspmdigitaloceanpolicy-engineAccess Context Managergoogle-access-context-managergcppolicy-engineAssured Workloadsgoogle-assured-workloadsgcppolicy-engineBinary Authorizationgoogle-binary-authorizationgcppolicy-engineIdentity and Access Managementgoogle-cloud-iamgcppolicy-engineFirebase App Checkgoogle-firebase-app-checkgcppolicy-engineModel Armorgoogle-model-armorgcppolicy-engine
and 16 more → Policy engine page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# AWS License Manager: tracks software entitlements against deployed resources. Per "What is AWS License
# Manager?" self-managed licenses are scoped to a single account (license asset groups widen that to an
# organization), limits can be hard or soft, and counting is by vCPU, core, socket or machine.
schemaVersion: "1"
type: "component"
id: "aws-license-manager"
kind: "policy-engine"
provider: "aws"
docs: "https://docs.aws.amazon.com/license-manager/latest/userguide/license-manager.html"
defaults:
  scope: "account"
  remediation: false
  managed: true
properties:
  licenseCountingType:
    type: "enum"
    values: ["vcpu", "core", "socket", "instance"]
  enforceLicenseLimit:
    type: "boolean"
  crossAccount:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/aws-license-manager.md