Support for Action Dependency in Cloud Custodian Policies

[bismayam]

Hi Team,

I have a requirement where I need to prevent the execution of a subsequent action if the preceding one fails within the same policy. Is there currently support for conditional action execution in policies for below use case ?

Use Case:
For example, in an EBS snapshot copy scenario, I want to ensure that the delete action does not run if the copy action fails. This is to avoid deleting a snapshot that wasn’t successfully copied.

Here’s a simplified version of my policy setup:

policies:

name: encrypt-unencrypted-ebs-snapshots
resource: ebs-snapshot
filters:

Encrypted: false
actions:
type: copy
encrypted: true
target_key: alias/aws/ebs
target_region:
name: delete-unencrypted-ebs-snapshots
resource: ebs-snapshot
filters:

Encrypted: false
actions:
type: delete
Is there a way to enforce that the delete policy only runs if the snapshot was successfully copied (i.e., the copy action didn’t fail)?
Thanks in advance!