vpc-network-acl-unused-check
Checks if there are unused network access control lists (network ACLs). The rule is COMPLIANT if each network ACL is associated with a subnet. The rule is NON_COMPLIANT if a network ACL is not associated with a subnet.
Identifier: VPC_NETWORK_ACL_UNUSED_CHECK
Resource Types: AWS::EC2::NetworkAcl
Trigger type: Configuration changes
Amazon Web Services Region: All supported Amazon regions except Asia Pacific (Osaka) Region
Parameters:
- None
Amazon CloudFormation template
To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.