|
55 | 55 | "Resource Types": "AWS::ACMPCA::CertificateAuthority",
|
56 | 56 | "Trigger type": "Periodic"
|
57 | 57 | },
|
| 58 | + "ACTIVE_MQ_SUPPORTED_VERSION": { |
| 59 | + "AWS Region": "All supported AWS regions", |
| 60 | + "Parameters": [ |
| 61 | + { |
| 62 | + "Name": "supportedEngineVersion", |
| 63 | + "Optional": false, |
| 64 | + "Type": "String" |
| 65 | + } |
| 66 | + ], |
| 67 | + "Resource Types": "AWS::AmazonMQ::Broker", |
| 68 | + "Trigger type": "Configuration changes" |
| 69 | + }, |
58 | 70 | "ALB_DESYNC_MODE_CHECK": {
|
59 | 71 | "AWS Region": "All supported AWS regions",
|
60 | 72 | "Parameters": [
|
|
219 | 231 | "Resource Types": "AWS::AppSync::GraphQLApi",
|
220 | 232 | "Trigger type": "Configuration changes"
|
221 | 233 | },
|
| 234 | + "APPSYNC_CACHE_CT_ENCRYPTION_AT_REST": { |
| 235 | + "AWS Region": "All supported AWS regions", |
| 236 | + "Parameters": [], |
| 237 | + "Resource Types": "AWS::AppSync::ApiCache", |
| 238 | + "Trigger type": "Configuration changes" |
| 239 | + }, |
| 240 | + "APPSYNC_CACHE_CT_ENCRYPTION_IN_TRANSIT": { |
| 241 | + "AWS Region": "All supported AWS regions", |
| 242 | + "Parameters": [], |
| 243 | + "Resource Types": "AWS::AppSync::ApiCache", |
| 244 | + "Trigger type": "Configuration changes" |
| 245 | + }, |
222 | 246 | "APPSYNC_CACHE_ENCRYPTION_AT_REST": {
|
223 | 247 | "AWS Region": "All supported AWS regions",
|
224 | 248 | "Parameters": [],
|
|
1619 | 1643 | "Resource Types": "AWS::EC2::Instance",
|
1620 | 1644 | "Trigger type": "Periodic"
|
1621 | 1645 | },
|
| 1646 | + "EC2_LAUNCH_TEMPLATE_IMDSV2_CHECK": { |
| 1647 | + "AWS Region": "All supported AWS regions", |
| 1648 | + "Parameters": [], |
| 1649 | + "Resource Types": "AWS::EC2::LaunchTemplate", |
| 1650 | + "Trigger type": "Configuration changes" |
| 1651 | + }, |
1622 | 1652 | "EC2_LAUNCH_TEMPLATE_PUBLIC_IP_DISABLED": {
|
1623 | 1653 | "AWS Region": "All supported AWS regions",
|
1624 | 1654 | "Parameters": [
|
|
1881 | 1911 | "Resource Types": "AWS::EC2::Volume",
|
1882 | 1912 | "Trigger type": "Configuration changes"
|
1883 | 1913 | },
|
| 1914 | + "EC2_VPN_CONNECTION_LOGGING_ENABLED": { |
| 1915 | + "AWS Region": "All supported AWS regions", |
| 1916 | + "Parameters": [], |
| 1917 | + "Resource Types": "AWS::EC2::VPNConnection", |
| 1918 | + "Trigger type": "Configuration changes" |
| 1919 | + }, |
1884 | 1920 | "ECR_PRIVATE_IMAGE_SCANNING_ENABLED": {
|
1885 | 1921 | "AWS Region": "All supported AWS regions",
|
1886 | 1922 | "Parameters": [],
|
|
2035 | 2071 | "Resource Types": "AWS::EFS::FileSystem",
|
2036 | 2072 | "Trigger type": "Periodic"
|
2037 | 2073 | },
|
| 2074 | + "EFS_FILESYSTEM_CT_ENCRYPTED": { |
| 2075 | + "AWS Region": "All supported AWS regions", |
| 2076 | + "Parameters": [ |
| 2077 | + { |
| 2078 | + "Name": "kmsKeyArns", |
| 2079 | + "Optional": true, |
| 2080 | + "Type": "String" |
| 2081 | + } |
| 2082 | + ], |
| 2083 | + "Resource Types": "AWS::EFS::FileSystem", |
| 2084 | + "Trigger type": "Configuration changes" |
| 2085 | + }, |
2038 | 2086 | "EFS_IN_BACKUP_PLAN": {
|
2039 | 2087 | "AWS Region": "All supported AWS regions",
|
2040 | 2088 | "Parameters": [],
|
|
3136 | 3184 | "Resource Types": "AWS::KMS::Key",
|
3137 | 3185 | "Trigger type": "Periodic"
|
3138 | 3186 | },
|
| 3187 | + "KMS_KEY_POLICY_NO_PUBLIC_ACCESS": { |
| 3188 | + "AWS Region": "All supported AWS regions", |
| 3189 | + "Parameters": [], |
| 3190 | + "Resource Types": "AWS::KMS::Key", |
| 3191 | + "Trigger type": "Configuration changes" |
| 3192 | + }, |
3139 | 3193 | "LAMBDA_CONCURRENCY_CHECK": {
|
3140 | 3194 | "AWS Region": "All supported AWS regions",
|
3141 | 3195 | "Parameters": [
|
|
3561 | 3615 | "Resource Types": "AWS::OpenSearch::Domain",
|
3562 | 3616 | "Trigger type": "Configuration changes"
|
3563 | 3617 | },
|
| 3618 | + "RABBIT_MQ_SUPPORTED_VERSION": { |
| 3619 | + "AWS Region": "All supported AWS regions", |
| 3620 | + "Parameters": [ |
| 3621 | + { |
| 3622 | + "Name": "supportedEngineVersion", |
| 3623 | + "Optional": false, |
| 3624 | + "Type": "String" |
| 3625 | + } |
| 3626 | + ], |
| 3627 | + "Resource Types": "AWS::AmazonMQ::Broker", |
| 3628 | + "Trigger type": "Configuration changes" |
| 3629 | + }, |
3564 | 3630 | "RDS_AURORA_MYSQL_AUDIT_LOGGING_ENABLED": {
|
3565 | 3631 | "AWS Region": "All supported AWS regions",
|
3566 | 3632 | "Parameters": [],
|
|
3750 | 3816 | "Resource Types": "AWS::RDS::DBInstance",
|
3751 | 3817 | "Trigger type": "Configuration changes"
|
3752 | 3818 | },
|
| 3819 | + "RDS_MYSQL_INSTANCE_ENCRYPTED_IN_TRANSIT": { |
| 3820 | + "AWS Region": "All supported AWS regions", |
| 3821 | + "Parameters": [], |
| 3822 | + "Resource Types": "AWS::RDS::DBInstance", |
| 3823 | + "Trigger type": "Periodic" |
| 3824 | + }, |
3753 | 3825 | "RDS_POSTGRESQL_LOGS_TO_CLOUDWATCH": {
|
3754 | 3826 | "AWS Region": "All supported AWS regions",
|
3755 | 3827 | "Parameters": [
|
|
3762 | 3834 | "Resource Types": "AWS::RDS::DBInstance",
|
3763 | 3835 | "Trigger type": "Configuration changes"
|
3764 | 3836 | },
|
| 3837 | + "RDS_POSTGRES_INSTANCE_ENCRYPTED_IN_TRANSIT": { |
| 3838 | + "AWS Region": "All supported AWS regions", |
| 3839 | + "Parameters": [], |
| 3840 | + "Resource Types": "AWS::RDS::DBInstance", |
| 3841 | + "Trigger type": "Periodic" |
| 3842 | + }, |
3765 | 3843 | "RDS_RESOURCES_PROTECTED_BY_BACKUP_PLAN": {
|
3766 | 3844 | "AWS Region": "All supported AWS regions",
|
3767 | 3845 | "Parameters": [
|
|
3816 | 3894 | "Resource Types": "AWS::RDS::DBSnapshot, AWS::RDS::DBClusterSnapshot",
|
3817 | 3895 | "Trigger type": "Configuration changes"
|
3818 | 3896 | },
|
| 3897 | + "RDS_SQL_SERVER_LOGS_TO_CLOUDWATCH": { |
| 3898 | + "AWS Region": "All supported AWS regions", |
| 3899 | + "Parameters": [ |
| 3900 | + { |
| 3901 | + "Name": "logTypes", |
| 3902 | + "Optional": true, |
| 3903 | + "Type": "CSV" |
| 3904 | + } |
| 3905 | + ], |
| 3906 | + "Resource Types": "AWS::RDS::DBInstance", |
| 3907 | + "Trigger type": "Configuration changes" |
| 3908 | + }, |
3819 | 3909 | "RDS_STORAGE_ENCRYPTED": {
|
3820 | 3910 | "AWS Region": "All supported AWS regions",
|
3821 | 3911 | "Parameters": [
|
|
3924 | 4014 | "Resource Types": "AWS::Redshift::Cluster",
|
3925 | 4015 | "Trigger type": "Configuration changes"
|
3926 | 4016 | },
|
| 4017 | + "REDSHIFT_CLUSTER_SUBNET_GROUP_MULTI_AZ": { |
| 4018 | + "AWS Region": "All supported AWS regions", |
| 4019 | + "Parameters": [], |
| 4020 | + "Resource Types": "AWS::Redshift::ClusterSubnetGroup", |
| 4021 | + "Trigger type": "Configuration changes" |
| 4022 | + }, |
3927 | 4023 | "REDSHIFT_DEFAULT_ADMIN_CHECK": {
|
3928 | 4024 | "AWS Region": "All supported AWS regions",
|
3929 | 4025 | "Parameters": [
|
|
4702 | 4798 | "Resource Types": "AWS::SNS::Topic",
|
4703 | 4799 | "Trigger type": "Configuration changes"
|
4704 | 4800 | },
|
| 4801 | + "SNS_TOPIC_NO_PUBLIC_ACCESS": { |
| 4802 | + "AWS Region": "All supported AWS regions", |
| 4803 | + "Parameters": [], |
| 4804 | + "Resource Types": "AWS::SNS::Topic", |
| 4805 | + "Trigger type": "Configuration changes" |
| 4806 | + }, |
4705 | 4807 | "SSM_DOCUMENT_NOT_PUBLIC": {
|
4706 | 4808 | "AWS Region": "All supported AWS regions",
|
4707 | 4809 | "Parameters": [],
|
|
4943 | 5045 | "Resource Types": "AWS::EC2::SecurityGroup",
|
4944 | 5046 | "Trigger type": "Configuration changes"
|
4945 | 5047 | },
|
| 5048 | + "VPC_ENDPOINT_ENABLED": { |
| 5049 | + "AWS Region": "All supported AWS regions", |
| 5050 | + "Parameters": [ |
| 5051 | + { |
| 5052 | + "Name": "serviceNames", |
| 5053 | + "Optional": false, |
| 5054 | + "Type": "CSV" |
| 5055 | + }, |
| 5056 | + { |
| 5057 | + "Name": "vpcIds", |
| 5058 | + "Optional": true, |
| 5059 | + "Type": "CSV" |
| 5060 | + } |
| 5061 | + ], |
| 5062 | + "Resource Types": "AWS::EC2::VPC", |
| 5063 | + "Trigger type": "Periodic" |
| 5064 | + }, |
4946 | 5065 | "VPC_FLOW_LOGS_ENABLED": {
|
4947 | 5066 | "AWS Region": "All supported AWS regions",
|
4948 | 5067 | "Parameters": [
|
|
0 commit comments