ec2-volume-inuse-check - Amazon Config
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

ec2-volume-inuse-check

Checks if EBS volumes are attached to EC2 instances. Optionally checks if EBS volumes are marked for deletion when an instance is terminated.

The rule is COMPLIANT if an EBS volume is attached to a running EC2 instance. In this case, it is COMPLIANT when the EBS volume is actively in use by an EC2 instance.

The rule is NON_COMPLIANT if an EBS volume is not attached to any EC2 instance or is attached to a stopped or terminated EC2 instance. In this case, it is NON_COMPLIANT when the EBS volume is not actively in use by an EC2 instance.

Identifier: EC2_VOLUME_INUSE_CHECK

Resource Types: AWS::EC2::Volume

Trigger type: Configuration changes

Amazon Web Services Region: All supported Amazon regions except Canada West (Calgary) Region

Parameters:

deleteOnTermination (Optional)
Type: boolean

EBS volumes are marked for deletion when an instance is terminated. Possible values: True or False (other input values are marked as NON_COMPLIANT). If set to True, the rule is NON_COMPLIANT if a terminated EBS volume is not marked for deletion.

Amazon CloudFormation template

To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.