Add policy metadata to resources.json

With a large set of complex policies it’s difficult to determine which policy and resource type each item in the resources.json file corresponds to. In our case, we process all of the resource.json files for multiple policies at once and feed the data into an ElasticSearch cluster for custom reporting.

I’d like to propose adding metadata about the policy itself to each resource in the resources.json output file.

"c7n:Policy": {
  "PolicyName": "security_group_ingress_all_ports",
  "Resource": "security-group",
  "Provider": "aws"
}

The “Resource” field is the most critical. Without it, we currently have to resort to “duck typing” every AWS resource based on the existence of key fields. It’s a bit of a headache and something I felt should be part of the resources.json output.

I can submit a PR for this if you agree to the proposal.

[kapilt]

have a look at #2844 which implements this (among other things)

[ebickle]

Execution time would be useful. One thing I was considering putting in my original proposal is to add the AWS service and resource type to it as well. For example, “ec2” and “image” as the service and resource-type - the native AWS names. In Cloud Custodian lingo the provider is AWS and the resource is “ami” - different name.