aegis-devops 0.1.0__py3-none-any.whl

aegis_core/_examples/sources/jira-1001.json

@@ -0,0 +1,28 @@
+{
+  "provider": "kubernetes",
+  "resource_pattern": "deployment/*",
+  "actions": [
+    "scale"
+  ],
+  "scope": {
+    "namespace": "prod"
+  },
+  "time_window": {
+    "days": [
+      "Mon",
+      "Tue",
+      "Wed",
+      "Thu",
+      "Fri"
+    ],
+    "start": "09:00",
+    "end": "17:00",
+    "tz": "America/New_York"
+  },
+  "effect": "BLOCK",
+  "constraint_class": "scaling",
+  "principal": "sre_lead",
+  "source_ref": "jira-1001",
+  "source_timestamp": "2026-01-15T09:00:00+00:00",
+  "rule_text": "Do not scale deployments in prod during business hours (09:00-17:00 ET, weekdays)."
+}

aegis_core/_examples/sources/jira-1002.json

@@ -0,0 +1,16 @@
+{
+  "provider": "kubernetes",
+  "resource_pattern": "configmap/*",
+  "actions": [
+    "delete",
+    "update"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "configuration",
+  "principal": "developer",
+  "source_ref": "jira-1002",
+  "source_timestamp": "2026-03-01T08:00:00+00:00",
+  "rule_text": "Escalate configmap changes for review before they are applied."
+}

aegis_core/_examples/sources/jira-2001.json

@@ -0,0 +1,17 @@
+{
+  "provider": "aws",
+  "resource_pattern": "ec2/instance/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "region": "us-east-1"
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-2001",
+  "source_timestamp": "2026-03-10T09:00:00+00:00",
+  "rule_text": "Block deleting EC2 instances in us-east-1; terminate through the runbook instead."
+}

aegis_core/_examples/sources/jira-2002.json

@@ -0,0 +1,15 @@
+{
+  "provider": "gcp",
+  "resource_pattern": "sql/instance/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-2002",
+  "source_timestamp": "2026-03-14T13:00:00+00:00",
+  "rule_text": "Block deleting Cloud SQL instances directly; use the decommission runbook instead."
+}

aegis_core/_examples/sources/jira-3001.json

@@ -0,0 +1,17 @@
+{
+  "provider": "helm",
+  "resource_pattern": "release/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "namespace": "prod"
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-3001",
+  "source_timestamp": "2026-03-20T09:00:00+00:00",
+  "rule_text": "Block deleting Helm releases in the prod namespace; use the decommission runbook instead."
+}

aegis_core/_examples/sources/jira-3002.json

@@ -0,0 +1,15 @@
+{
+  "provider": "github",
+  "resource_pattern": "workflow/deploy-prod*",
+  "actions": [
+    "run"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "configuration",
+  "principal": "sre_lead",
+  "source_ref": "jira-3002",
+  "source_timestamp": "2026-03-20T10:30:00+00:00",
+  "rule_text": "Escalate manual runs of production deploy workflows for human review."
+}

aegis_core/_examples/sources/jira-3003.json

@@ -0,0 +1,17 @@
+{
+  "provider": "argocd",
+  "resource_pattern": "app/prod-*",
+  "actions": [
+    "sync"
+  ],
+  "scope": {
+    "prune": true
+  },
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "configuration",
+  "principal": "sre_lead",
+  "source_ref": "jira-3003",
+  "source_timestamp": "2026-03-20T09:30:00+00:00",
+  "rule_text": "Escalate ArgoCD syncs of prod applications with --prune for human review."
+}

aegis_core/_examples/sources/jira-3004.json

@@ -0,0 +1,17 @@
+{
+  "provider": "kubernetes",
+  "resource_pattern": "*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "namespace": "prod"
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-3004",
+  "source_timestamp": "2026-03-21T09:00:00+00:00",
+  "rule_text": "Block deleting any resource in the prod namespace (including deleting the namespace itself, which cascades to everything in it); only the runbook may delete in prod."
+}

aegis_core/_examples/sources/jira-3005.json

@@ -0,0 +1,17 @@
+{
+  "provider": "helm",
+  "resource_pattern": "release/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "env": "prod"
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-3005",
+  "source_timestamp": "2026-03-20T09:15:00+00:00",
+  "rule_text": "Block deleting Helm releases in any production environment (resolved from the kube context), whatever the namespace; use the decommission runbook instead."
+}

aegis_core/_examples/sources/jira-5001.json

@@ -0,0 +1,17 @@
+{
+  "provider": "sql",
+  "resource_pattern": "table/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "unbounded": true
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-5001",
+  "source_timestamp": "2026-04-01T09:00:00+00:00",
+  "rule_text": "Block unbounded DELETE statements against any table (a DELETE with no WHERE clause)."
+}

aegis_core/_examples/sources/jira-5002.json

@@ -0,0 +1,15 @@
+{
+  "provider": "sql",
+  "resource_pattern": "database/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-5002",
+  "source_timestamp": "2026-04-01T09:05:00+00:00",
+  "rule_text": "Block DROP DATABASE / DROP SCHEMA statements outright."
+}

aegis_core/_examples/sources/jira-5003.json

@@ -0,0 +1,18 @@
+{
+  "provider": "sql",
+  "resource_pattern": "table/*",
+  "actions": [
+    "update"
+  ],
+  "scope": {
+    "ddl": true,
+    "drop_column": true
+  },
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "configuration",
+  "principal": "sre_lead",
+  "source_ref": "jira-5003",
+  "source_timestamp": "2026-04-01T09:10:00+00:00",
+  "rule_text": "Escalate ALTER TABLE ... DROP COLUMN statements for human review before they run."
+}

aegis_core/_examples/sources/jira-5004.json

@@ -0,0 +1,17 @@
+{
+  "provider": "mongodb",
+  "resource_pattern": "collection/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {
+    "unbounded": true
+  },
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-5004",
+  "source_timestamp": "2026-04-01T09:15:00+00:00",
+  "rule_text": "Block unbounded deleteMany/remove calls against any Mongo collection (an empty filter matches everything)."
+}

aegis_core/_examples/sources/jira-5006.json

@@ -0,0 +1,15 @@
+{
+  "provider": "migration",
+  "resource_pattern": "database/*",
+  "actions": [
+    "delete"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "jira-5006",
+  "source_timestamp": "2026-04-01T09:25:00+00:00",
+  "rule_text": "Block database-wiping migration commands (flyway clean, rails db:drop/db:reset, prisma migrate reset) outright."
+}

aegis_core/_examples/sources/plan-1001.json

@@ -0,0 +1,10 @@
+{
+  "provider": "terraform",
+  "effect": "ESCALATE",
+  "constraint_class": "configuration",
+  "principal": "sre_lead",
+  "source_ref": "plan-1001",
+  "source_timestamp": "2026-04-01T09:00:00+00:00",
+  "rule_text": "Escalate any terraform plan that touches more than 25 resources for human review.",
+  "max_intents": 25
+}

aegis_core/_examples/sources/plan-1002.json

@@ -0,0 +1,17 @@
+{
+  "provider": "terraform",
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "plan-1002",
+  "source_timestamp": "2026-04-02T09:00:00+00:00",
+  "rule_text": "Block any terraform plan that deletes or replaces an aws_db_instance.",
+  "max_matching": {
+    "actions": [
+      "delete",
+      "replace"
+    ],
+    "resource_pattern": "aws_db_instance.*",
+    "max": 0
+  }
+}

aegis_core/_examples/sources/plan-1003.json

@@ -0,0 +1,24 @@
+{
+  "provider": "terraform",
+  "effect": "BLOCK",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "plan-1003",
+  "source_timestamp": "2026-04-03T09:00:00+00:00",
+  "rule_text": "Block a terraform plan that both deletes resources in us-east-1 and creates resources anywhere; split the change into separate plans for review.",
+  "forbid_together": [
+    {
+      "actions": [
+        "delete"
+      ],
+      "scope": {
+        "region": "us-east-1"
+      }
+    },
+    {
+      "actions": [
+        "create"
+      ]
+    }
+  ]
+}

aegis_core/_examples/sources/plan-1004.json

@@ -0,0 +1,18 @@
+{
+  "provider": "kubernetes",
+  "effect": "ESCALATE",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "plan-1004",
+  "source_timestamp": "2026-04-04T09:00:00+00:00",
+  "rule_text": "Escalate a kubectl batch where more than 50% of the touched resources are deletes.",
+  "ratio": {
+    "numerator": {
+      "actions": [
+        "delete"
+      ]
+    },
+    "denominator": {},
+    "max": 0.5
+  }
+}

aegis_core/_examples/sources/plan-5005.json

@@ -0,0 +1,16 @@
+{
+  "provider": "pulumi",
+  "resource_pattern": "aws/rds/*",
+  "actions": [
+    "delete",
+    "replace"
+  ],
+  "scope": {},
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "plan-5005",
+  "source_timestamp": "2026-04-01T09:20:00+00:00",
+  "rule_text": "Escalate any Pulumi delete or replace of an RDS resource for human review before applying."
+}

aegis_core/_examples/sources/slack-perma-1.json

@@ -0,0 +1,18 @@
+{
+  "provider": "terraform",
+  "resource_pattern": "aws_instance.*",
+  "actions": [
+    "delete",
+    "replace"
+  ],
+  "scope": {
+    "region": "us-east-1"
+  },
+  "time_window": null,
+  "effect": "ESCALATE",
+  "constraint_class": "deletion",
+  "principal": "admin",
+  "source_ref": "slack-perma-1",
+  "source_timestamp": "2026-02-10T18:30:00+00:00",
+  "rule_text": "Escalate any destructive terraform change to prod EC2 instances in us-east-1 for human review."
+}