ssm-document-not-public
Checks if Amazon Systems Manager documents owned by the account are public. The rule is NON_COMPLIANT if Systems Manager documents with the owner 'Self' are public.
Identifier: SSM_DOCUMENT_NOT_PUBLIC
Resource Types: AWS::SSM::Document
Trigger type: Periodic
Amazon Web Services Region: All supported Amazon regions except Asia Pacific (Malaysia), Israel (Tel Aviv), Canada West (Calgary) Region
Parameters:
- None
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.