AWS::Inspector::ResourceGroup

The AWS::Inspector::ResourceGroup resource is used to create Amazon Inspector resource groups. A resource group defines a set of tags that, when queried, identify the AWS resources that make up the assessment target.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Type" : "AWS::Inspector::ResourceGroup",
  "Properties" : {
      "ResourceGroupTags" : [ Tag, ... ]
    }
}

YAML

Type: AWS::Inspector::ResourceGroup
Properties:
  ResourceGroupTags: 
    - Tag

Properties

ResourceGroupTags

The tags (key and value pairs) that will be associated with the resource group.

For more information, see Tag.

Required: Yes

Type: Array of Tag

Minimum: 1

Maximum: 10

Update requires: Replacement

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Ref function, Ref returns the ARN of the new resource group.

For more information about using the Ref function, see Ref.

Fn::GetAtt

The Fn::GetAtt intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAtt intrinsic function, see Fn::GetAtt.

Arn

The Amazon Resource Name (ARN) that specifies the resource group that is created.

Examples

Declaring an Amazon Inspector Resource Group Resource

The following example shows how to declare an AWS::Inspector::ResourceGroup resource to create an Amazon Inspector resource group.

JSON

{
    "Type": "AWS::Inspector::ResourceGroup",
    "Properties": {
        "ResourceGroupTags": [{
            "Key": "Name",
            "Value": "example"
        }]
    }
}

YAML

Type: AWS::Inspector::ResourceGroup
Properties:
  ResourceGroupTags:
    - Key: Name
      Value: example