AWS Config
Developer Guide

ebs-snapshot-public-restorable-check

Checks whether Amazon Elastic Block Store snapshots are not publicly restorable. The rule is NON_COMPLIANT if one or more snapshots with the RestorableByUserIds field is set to all. If this field is set to all, then Amazon EBS snapshots are public.

Identifier: EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK

Trigger type: Periodic

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.