ec2-launch-template-public-ip-disabled

Checks if Amazon EC2 Launch Templates are set to assign public IP addresses to Network Interfaces. The rule is NON_COMPLIANT if the default version of an EC2 Launch Template has at least 1 Network Interface with 'AssociatePublicIpAddress' set to 'true'.

Identifier: EC2_LAUNCH_TEMPLATE_PUBLIC_IP_DISABLED

Resource Types: AWS::EC2::LaunchTemplate

Trigger type: Configuration changes

AWS Region: All supported AWS regions

Parameters:

exemptedLaunchTemplates (Optional)

Type: CSV

Comma-separated list of exempted EC2 Launch Template IDs that are allowed to have Network Interfaces with the AssociatePublicIpAddress value set to 'true'.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.