AWS License Manager
Tracks software entitlements against deployed resources, counting by vCPU, core, socket or instance.
- Provider
- aws
- Kind
- Policy engine
- Category
- Operations
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| crossAccount | boolean | — | no | false | inherited |
| effect | enum | audit | deny | modify | deploy-if-not-exists | no | — | inherited |
| enforceLicenseLimit | boolean | — | no | — | inherited |
| enforcementMode | enum | enforced | disabled | no | — | inherited |
| licenseCountingType | enum | vcpu | core | socket | instance | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| policyCount | integer | — | no | — | inherited |
| remediation | boolean | — | no | false | ▸ false |
| scope | enum | resource | group | account | organization | no | — | ▸ account |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "license-manager", component: "aws-license-manager" }Cloud Configalibaba-cloud-configData Security Centeralibaba-data-security-centerAmazon CodeGuru Revieweraws-codeguru-reviewerAWS Configaws-configAWS Control Toweraws-control-towerIAM Access Analyzeraws-iam-access-analyzerAWS Lake Formationaws-lake-formationAWS Organizationsaws-organizationsAWS Resource Access Manageraws-ramAmazon Verified Permissionsaws-verified-permissionsMicrosoft Entra Conditional Accessazure-conditional-accessAzure Policyazure-policyMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementCloudflare Data Loss Preventioncloudflare-dlpCalypsoAIcalypsoaiCerboscerbosOPA GatekeepergatekeeperGuardrails AIguardrails-aiHiddenLayer AI Security PlatformhiddenlayerKubeArmorkubearmorKubewardenkubewardenKyvernokyvernoLakera Guardlakera-guardLLM Guardllm-guardNeMo Guardrailsnemo-guardrailsOpen Policy AgentopaPermit.iopermit-ioGeneric policy enginepolicy-enginePrompt Securityprompt-securityProtect AIprotect-aiRebuffrebuffRobust Intelligencerobust-intelligenceSonarQube ServersonarqubeDigitalOcean CSPMdigitalocean-cspmAccess Context Managergoogle-access-context-managerAssured Workloadsgoogle-assured-workloadsBinary Authorizationgoogle-binary-authorizationIdentity and Access Managementgoogle-cloud-iamFirebase App Checkgoogle-firebase-app-checkModel Armorgoogle-model-armor
and 16 more → Policy engine page# yaml-language-server: $schema=../../schema/component.schema.json # AWS License Manager: tracks software entitlements against deployed resources. Per "What is AWS License # Manager?" self-managed licenses are scoped to a single account (license asset groups widen that to an # organization), limits can be hard or soft, and counting is by vCPU, core, socket or machine. schemaVersion: "1" type: "component" id: "aws-license-manager" kind: "policy-engine" provider: "aws" docs: "https://docs.aws.amazon.com/license-manager/latest/userguide/license-manager.html" defaults: scope: "account" remediation: false managed: true properties: licenseCountingType: type: "enum" values: ["vcpu", "core", "socket", "instance"] enforceLicenseLimit: type: "boolean" crossAccount: type: "boolean" default: false