I am getting error in running a policy for AMI action cancel-launch-permission

[ks-ihsm]

I am getting error in running a policy for AMI action cancel-launch-permission

[ks-ihsm]

@linuxananth1976 @ajkerrigan : Could you please share you thoughts here.

[ajkerrigan]

I think I see the confusion - that doc is referencing the dryrun option for the action rather than the custodian run command. This action defaults to dry run regardless of your custodian run options. So your action:

actions:
  - cancel-launch-permission

Is a shorter way to say:

actions:
  - type: cancel-launch-permission
    dryrun: true

So you can use dryrun: false in your policy to bypass that action-level safeguard.

Your instinct to set dry run with custodian run is the way to go most of the time 👍 . That makes cancel-launch-permission a bit unique/confusing.

[ks-ihsm]

Thanks for the response @ajkerrigan

This solution worked for us.