ec2-instance-launched-with-allowed-ami
Checks if running or stopped EC2 instances were launched with Amazon Machine Images (AMIs) that meet your Allowed AMIs criteria. The rule is NON_COMPLIANT if an AMI doesn't meet the Allowed AMIs criteria and the Allowed AMIs settings isn't disabled.
Identifier: EC2_INSTANCE_LAUNCHED_WITH_ALLOWED_AMI
Resource Types: AWS::EC2::Instance
Trigger type: Configuration changes and Periodic
AWS Region: All supported AWS regions except Canada West (Calgary), Europe (Spain), Europe (Zurich) Region
Parameters:
- InstanceStateNameList (Optional)
- Type: CSV
-
Comma-separate list of Amazon EC2 instance states for the rule to check. Valid values are "running" and "stopped".
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.