AWS::Inspector::ResourceGroup

The AWS::Inspector::ResourceGroup resource is used to create Amazon Inspector resource groups. A resource group defines a set of tags that, when queried, identify the AWS resources that make up the assessment target.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Type" : "AWS::Inspector::ResourceGroup",
  "Properties" : {
      "ResourceGroupTags" : [ Tag, ... ]
    }
}

YAML

Type: AWS::Inspector::ResourceGroup
Properties: 
  ResourceGroupTags: 
    - Tag

Properties

ResourceGroupTags

The tags (key and value pairs) that will be associated with the resource group.

For more information, see Tag.

Required: Yes

Type: List of Tag

Maximum: 10

Update requires: Replacement

Return values

Ref

When you pass the logical ID of this resource to the intrinsic Reffunction, Refreturns the ARN of the new resource group.

For more information about using the Reffunction, see Ref.

Fn::GetAtt

The Fn::GetAttintrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the Fn::GetAttintrinsic function, see Fn::GetAtt.

Arn

The Amazon Resource Name (ARN) that specifies the resource group that is created.

Examples

Declaring an Amazon Inspector Resource Group Resource

The following example shows how to declare an AWS::Inspector::ResourceGroup resource to create an Amazon Inspector resource group.

JSON

{
    "Type": "AWS::Inspector::ResourceGroup",
    "Properties": {
        "ResourceGroupTags": [{
            "Key": "Name",
            "Value": "example"
        }]
    }
}

YAML

Type: AWS::Inspector::ResourceGroup
Properties:
  ResourceGroupTags:
    - Key: Name
      Value: example