AWS::Inspector::AssessmentTarget - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


The AWS::Inspector::AssessmentTarget resource is used to create Amazon Inspector assessment targets, which specify the Amazon EC2 instances that will be analyzed during an assessment run.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Type" : "AWS::Inspector::AssessmentTarget", "Properties" : { "AssessmentTargetName" : String, "ResourceGroupArn" : String } }


Type: AWS::Inspector::AssessmentTarget Properties: AssessmentTargetName: String ResourceGroupArn: String



The name of the Amazon Inspector assessment target. The name must be unique within the Amazon Web Services account.

Required: No

Type: String

Minimum: 1

Maximum: 140

Update requires: Replacement


The ARN that specifies the resource group that is used to create the assessment target. If resourceGroupArn is not specified, all EC2 instances in the current Amazon Web Services account and Region are included in the assessment target.

Required: No

Type: String

Minimum: 1

Maximum: 300

Update requires: No interruption

Return values


When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the ResourceGroupArn of the new assessment target.

For more information about using the Ref function, see Ref.


The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.


The Amazon Resource Name (ARN) that specifies the assessment target that is created.


Declaring an Amazon Inspector Assessment Target Resource

The following examples show how to declare an AWS::Inspector::AssessmentTarget resource to create an Amazon Inspector assessment target.


{ "Type": "AWS::Inspector::AssessmentTarget", "Properties": { "AssessmentTargetName": "MyAssessmentTarget", "ResourceGroupArn": "arn:aws:inspector:us-west-2:123456789012:resourcegroup/0-AB6DMKnv" } }


Type: AWS::Inspector::AssessmentTarget Properties: AssessmentTargetName: MyAssessmentTarget ResourceGroupArn: arn:aws:inspector:us-west-2:123456789012:resourcegroup/0-AB6DMKnv