Data Security

Show all resources without a data classification tag {}?

Find (Host|DataStore) with classification = undefined

// Returns a count instead
Find (Host|DataStore) with classification = undefined as e return count(e)

Show all resources without a data classification tag in VPC with tag {}?

// Filter by a tag on the VPC
Find (Host|DataStore|Workload) with classification = undefined
  that relates to aws_vpc with tag.{tagName} = '{tagValue}'

// Filter by vpcId or name
Find (Host|DataStore|Workload) with classification = undefined
  that relates to aws_vpc with vpcId='{vpcId}' or name='{name}'

What are all the resources without encryption with data security tag '{restricted}'?

Find DataStore with encrypted!=true and classification='restricted'

// Sometimes is also interesting to find unencrypted data that is non-public
Find DataStore with encrypted!=true and classification!='Public'