AWS::Inspector::ResourceGroup - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).


The AWS::Inspector::ResourceGroup resource is used to create Amazon Inspector resource groups. A resource group defines a set of tags that, when queried, identify the Amazon resources that make up the assessment target.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Type" : "AWS::Inspector::ResourceGroup", "Properties" : { "ResourceGroupTags" : [ Tag, ... ] } }


Type: AWS::Inspector::ResourceGroup Properties: ResourceGroupTags: - Tag



The tags (key and value pairs) that will be associated with the resource group.

For more information, see Tag.

Required: Yes

Type: Array of Tag

Minimum: 1

Maximum: 10

Update requires: Replacement

Return values


When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the ARN of the new resource group.

For more information about using the Ref function, see Ref.


The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.


The Amazon Resource Name (ARN) that specifies the resource group that is created.


Declaring an Amazon Inspector Resource Group Resource

The following example shows how to declare an AWS::Inspector::ResourceGroup resource to create an Amazon Inspector resource group.


{ "Type": "AWS::Inspector::ResourceGroup", "Properties": { "ResourceGroupTags": [{ "Key": "Name", "Value": "example" }] } }


Type: AWS::Inspector::ResourceGroup Properties: ResourceGroupTags: - Key: Name Value: example