efs-resources-in-logically-air-gapped-vault - Amazon Config
Amazon CloudFormation template
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

efs-resources-in-logically-air-gapped-vault

Checks if Amazon Elastic File System (Amazon EFS) File Systems are in a logically air-gapped vault. The rule is NON_COMPLIANT if an Amazon EFS File System is not in a logically air-gapped vault within the specified time period.

Identifier: EFS_RESOURCES_IN_LOGICALLY_AIR_GAPPED_VAULT

Resource Types: AWS::EFS::FileSystem

Trigger type: Periodic

Amazon Web Services Region: All supported Amazon regions

Parameters:

resourceTags (Optional)
Type: String

Tags of Amazon EFS File Systems for the rule to check, in JSON format.

resourceId (Optional)
Type: String

ID of EFS File System for the rule to check.

recoveryPointAgeValue (Optional)
Type: int
Default: 1

Numerical value for maximum allowed age. No more than 2184 for hours, 91 for days.

recoveryPointAgeUnit (Optional)
Type: String
Default: days

Unit of time for maximum allowed age. Accepted values: 'hours', 'days'.

Amazon CloudFormation template

To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.