ec2-instance-launched-with-allowed-ami
Checks if running or stopped EC2 instances were launched with Amazon Machine Images (AMIs) that meet your Allowed AMIs criteria. The rule is NON_COMPLIANT if an AMI doesn't meet the Allowed AMIs criteria and the Allowed AMIs settings isn't disabled.
Identifier: EC2_INSTANCE_LAUNCHED_WITH_ALLOWED_AMI
Resource Types: AWS::EC2::Instance
Trigger type: Configuration changes and Periodic
Amazon Web Services Region: All supported Amazon regions
Parameters:
- InstanceStateNameList (Optional)
- Type: CSV
-
Comma-separate list of Amazon EC2 instance states for the rule to check. Valid values are "running" and "stopped".
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.