ebs-resources-in-logically-air-gapped-vault - Amazon Config
Amazon CloudFormation template
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

ebs-resources-in-logically-air-gapped-vault

Checks if Amazon Elastic Block Store (Amazon EBS) volumes are in a logically air-gapped vault. The rule is NON_COMPLIANT if an Amazon EBS volume is not in a logically air-gapped vault within the specified time period.

Identifier: EBS_RESOURCES_IN_LOGICALLY_AIR_GAPPED_VAULT

Resource Types: AWS::EC2::Volume

Trigger type: Periodic

Amazon Web Services Region: All supported Amazon regions

Parameters:

resourceTags (Optional)
Type: String

Tags of Amazon EBS volumes for the rule to check, in JSON format.

resourceId (Optional)
Type: String

ID of Amazon EBS volume for the rule to check.

recoveryPointAgeValue (Optional)
Type: int
Default: 1

Numerical value for maximum allowed age. No more than 2184 for hours, 91 for days.

recoveryPointAgeUnit (Optional)
Type: String
Default: days

Unit of time for maximum allowed age. Accepted values: 'hours', 'days'.

Amazon CloudFormation template

To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.