AWS CloudFormation
User Guide (Version )

AWS::Inspector::ResourceGroup

The AWS::Inspector::ResourceGroup resource is used to create Amazon Inspector resource groups. A resource group defines a set of tags that, when queried, identify the AWS resources that make up the assessment target.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Type" : "AWS::Inspector::ResourceGroup", "Properties" : { "ResourceGroupTags" : [ Tag, ... ] } }

YAML

Type: AWS::Inspector::ResourceGroup Properties: ResourceGroupTags: - Tag

Properties

ResourceGroupTags

The tags (key and value pairs) that will be associated with the resource group.

For more information, see Tag.

Required: Yes

Type: List of Tag

Maximum: 10

Update requires: Replacement

Return Values

Ref

Fn::GetAtt

The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.

Arn

The Amazon Resource Name (ARN) that specifies the resource group that is created.

Examples

Declaring an Amazon Inspector Reource Group Resource

The following example shows how to declare an AWS::Inspector::ResourceGroup resource to create an Amazon Inspector resource group.

JSON

"myresourcegroup": { "Type": "AWS::Inspector::ResourceGroup", "Properties": { "ResourceGroupTags": [ { "Key": "Name", "Value": "example" } ] } }

YAML

myresourcegroup: Type: "AWS::Inspector::ResourceGroup" Properties: ResourceGroupTags: - Key: "Name" Value: "example"