AWS::Config::ConformancePack - AWS CloudFormation

AWS::Config::ConformancePack

A conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed in an account and a region. ConformancePack creates a service linked role in your account. The service linked role is created only when the role does not exist in your account.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::Config::ConformancePack", "Properties" : { "ConformancePackInputParameters" : [ ConformancePackInputParameter, ... ], "ConformancePackName" : String, "DeliveryS3Bucket" : String, "DeliveryS3KeyPrefix" : String, "TemplateBody" : String, "TemplateS3Uri" : String } }

YAML

Type: AWS::Config::ConformancePack Properties: ConformancePackInputParameters: - ConformancePackInputParameter ConformancePackName: String DeliveryS3Bucket: String DeliveryS3KeyPrefix: String TemplateBody: String TemplateS3Uri: String

Properties

ConformancePackInputParameters

A list of ConformancePackInputParameter objects.

Required: No

Type: List of ConformancePackInputParameter

Update requires: No interruption

ConformancePackName

Name of the conformance pack you want to create.

Required: Yes

Type: String

Update requires: Replacement

DeliveryS3Bucket

AWS Config stores intermediate files while processing conformance pack template.

Required: Yes

Type: String

Update requires: No interruption

DeliveryS3KeyPrefix

The prefix for the Amazon S3 bucket.

Required: No

Type: String

Update requires: No interruption

TemplateBody

A string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.

Note

You can only use a YAML template with one resource type, that is, config rule and a remediation action.

Required: No

Type: String

Update requires: No interruption

TemplateS3Uri

Location of file containing the template body (s3://bucketname/prefix). The uri must point to the conformance pack template (max size: 300 KB) that is located in an Amazon S3 bucket.

Note

You must have access to read Amazon S3 bucket.

Required: No

Type: String

Update requires: No interruption

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the name of the conformance pack.

For more information about using the Ref function, see Ref.

Examples

Conformance Pack

The following example creates a conformance pack.

JSON

{ "Resources": { "ConformancePack": { "Type": "AWS::Config::ConformancePack", "Properties": { "ConformancePackName": "ConformancePackName", "DeliveryS3Bucket": "DeliveryS3Bucket", "TemplateS3Uri": "s3://bucketname/prefix" } } } }

YAML

--- AWSTemplateFormatVersion: 2010-09-09 Resources: CloudFormationCanaryPack: Type: AWS::Config::ConformancePack Properties: ConformancePackName: ConformancePackName DeliveryS3Bucket: DeliveryS3Bucket TemplateS3Uri: s3://bucketname/prefix