New Policies AWS Long Running Instances   checks for instances that have been running for a long time and may be able to be terminated or upgraded. Azure Old Snapshots   checks for snapshots on Azure that may be able to be deleted. ... View more

New Features Credential manager now supports native creation and editing of credentials for   Azure Resource Manager,   Azure Enterprise Agreement, and   Google cloud. These native editors simplify the process of creating and updating credentials for those services. The   API for managing credentials   is now publicly available. Automate the process of connecting services and rotating creds by leveraging this set of API calls. Changes to Existing Features Improved success and error messages when managing credentials Selected credential information is now available when viewing applied policies Improved experience when editing credentials Simplified credential editing screens for AWS credential types New Policies AWS Unattached Volumes   checks for old volumes that can be deleted using the AWS APIs directly. Google Unattached Volumes   checks for old volumes that can be deleted using the Google APIs directly. Google Old Snapshots   checks for old snapshots that can be deleted using the Google APIs directly. Changes to Existing Policies Budget Alerts   was updated to provide a more accurate assessment of current month costs against the specified budget amount. Billing Center Cost Anomalies   was updated to help reduce noise by allowing for a minimum spend amount before billing centers are reported on. ... View more

New Features Policies now have   credential management   built-in to the product, making it easier to connect your different clouds for policy governance. Along with the feature release, many policies have been upgraded to use the new credential capability (see below).   Check out the docs to learn more. Some of the benefits include: Simplified experience to connect clouds for policy governance Ability to rotate credentials without affecting running policies Support for new credential types including AWS Cross-Account Roles and NTLM Reduced overhead when dealing with multiple cloud accounts Policy designers can now specify a   default frequency   value   in their policies, simplifying the process of applying a policy for their users. New Policies An on-premises version of   AWS EC2 Instances not running FlexNet Inventory Agent An on-premises version of   Azure Instances not running FlexNet Inventory Agent An on-premises version of   FlexNet Manager Licenses At Risk An on-premises version of   Schedule FlexNet Manager Report Changes to Existing Policies The following policies have been updated to support the new method of credential management mentioned above: AWS EC2 Instances not running FlexNet Inventory Agent - Cloud AWS Inefficient Instance Utilization using CloudWatch AWS Open Buckets AWS Rightsize RDS Instances AWS Unused RDS Instance Azure Inefficient Instance Utilization using Log Analytics Azure Instances not running FlexNet Inventory Agent - Cloud Azure Long-Stopped Instances Azure Rightsize SQL Databases Azure Subscription Access FlexNet Manager Licenses At Risk - Cloud Google Inefficient Instance Utilization using StackDriver Schedule FlexNet Manager Report - Cloud ... View more

New Policies Disallowed Cloud Images   reports on any image usage outside of the specified approved images. SaaS Manager - Suspicious Users   creates an incident when Flexera SaaS Manager detects suspicious users logging into SaaS applications. SaaS Manager - User Status Change   identifies users whose status changes to   inactive   in Flexera SaaS Manager. SaaS Manager - Renewal Reminder   identifies applications with upcoming contract renewals. Office 365 Security Alerts   surfaces security alerts of a user-specified severity level that have been raised in Office 365. SaaS Manager - Unsanctioned Spend   creates an incident when Flexera SaaS Manager identifies unsanctioned spend on SaaS applications. ... View more

New Policies AWS Long-Stopped Instances   checks for instances stopped longer than the specified period of time and terminates the instance after user approval. Google Long-Stopped Instances   checks for instances stopped longer than the specified period of time and terminates the instance after user approval. Changes to Existing Policies Azure Rightsize SQL Databases   was renamed and now can take action to resize the SQL Database after user approval. ... View more

New Policies AWS Savings Plan Recommendations   uses the AWS Cost Explorer to raise incidents if AWS recommends any Savings Plan purchases where the savings is more than the specified threshold. AWS EC2 Instances not running FlexNet Inventory Agent   reports on any instance running in EC2 that does not have the FlexNet Inventory Agent installed. Azure Migrate Integration   collects the resources from a RISC Foundations assessment and seeds Azure Migrate with the discovered servers. ... View more

New Policies Azure Regulatory Compliance   provides an overview of the regulatory compliance controls and compliance scores from   Azure Security Center NetFlow Top Talkers   uses RISC Foundations data to identify the top communication routes for each application stack to external dependencies based on network traffic patterns. Application Migration Recommendations   analyzes RISC CloudScape data and provides recommendations for migrating application stacks to the most cost effective cloud provider. Changes to Existing Policies Inefficient Instance Utilization using RightLink   was renamed for clarity and now supports VMWare instances through the use of RCA-V. Scheduled Report   now provides additional options for the timeline of spend visualization when running this policy. ... View more

New Policies Running Instance Count Anomaly   checks for changes in the count of instances running in a specific account over the prior 30-day period and alerts you if the count has crossed the specified threshold. AWS Unencrypted ELB Listeners (CLB)   checks for any CLBs that are unencrypted and sends an alert. AWS Unencrypted ELB Listeners (ALB/NLB)   checks for any ALBs or NLBs that are unencrypted and sends an alert. Monthly Actual v. Budgeted Spend Report   allows you to specify a budget amount for a given billing center and be altered if the spend crosses that threshold. AWS Disallowed Regions   reports on any instance usage in regions that you specify as disallowed, allowing for termination of the instances after user approval. Azure Unused SQL Databases   checks for unused Azure SQL Databases, based on DB connections, and deletes the database after user approval. New Service Usage   reports on any new service usage in the current month that did not exist in the previous month, based on billing data. Changes to Existing Policies Azure Subscription Access   was modified to account for more than 100 users and to only gather subscription-level role assignments. ... View more

Changes to Existing Features Policies can now be configured   to run on a monthly interval   for use cases that require less frequent checks. Simply choose the   monthly option under policy schedule   when applying your policy. ... View more

New Policies Azure Instances not running FlexNet Inventory Agent   checks for any instances in Azure not running the agent so that you can ensure full license coverage across your compute landscape. FlexNet Manager Licenses At Risk   provides a report of all licenses at risk according to FlexNet Manager. ... View more

Changes to Existing Policies Multiple policies were modified to include a manual approval step before taking action so that items can be reviewed before being modified. Manual approval for any policy can be skipped by checking the   "Skip Action Approvals"   option when applying a policy. Multiple policies were modified such that they are now limited to only being applied to only one account. This limitation is appropriate in cases where the policy uses an external credential for authentication and running the policy on multiple accounts would lead to the exact same behavior repeated numerous times. ... View more