Rules¶

Contents¶

Tip

For a primer on rules, controls, and how they relate, see Compliance Concepts.

Navigating the Rules Page¶

Fugue’s Rules page is accessible from the Rules link in the upper-right corner of the UI. It displays all Fugue rules and custom rules for an organization. You can search and sort the list.

From the Rules page, you can:

Create, edit, or delete a custom rule
Enable or disable a Fugue rule or custom rule
Select a rule to view more information (Enterprise and Team plans only):
- Description
- Link to remediation steps
- Affected resource type(s)
- Rule type (Fugue or Custom)
- Who last updated (custom rules only) or enabled/disabled a rule (all rules)
- Associated compliance controls

Searching for Rules¶

Use the Enter key to search by a keyword. You can enter multiple queries by using Tab after each one.

The Rules search also supports key:value syntax for the following search terms:

name: Rule name
description: Rule description
status: Rule status; disabled, enabled (all rules), invalid (custom rules only)
source: Rule type; fugue (out-of-the-box) or custom
resource_type: Affected resource type(s)
provider: Cloud provider; aws, govcloud, or azure (for Azure and Azure Government)
category: Rule category
severity: Rule severity

For example, you can search by the following terms:

severity:critical shows only rules with a severity level of Critical.
category:custom shows only custom rules.
status:invalid provider:aws shows only AWS rules that are invalid. (Enter Tab between the terms.)

Sorting and Pagination¶

You can sort the rules by name and severity. Default is in decreasing order of severity (starting with Critical).

The active sorted column shows a single arrow. Select the arrow to reverse the direction:

The inactive sortable column shows a double arrow. Select the double arrow to make it active:

If you have more than 10 rules, you’ll see a dropdown menu below the table of rules. You can choose to show 10, 20, 50, or 100 rows per page: