ec2-security-group-attached-to-eni

Checks if non-default security groups are attached to Elastic network interfaces (ENIs). The rule is NON_COMPLIANT if the security group is not associated with an elastic network interface (ENI).

Important

This rule is being deprecated due to Indirect Relationship Deprecation as configuration items triggering this rule will not longer be created once indirect relationships are deprecated. If you use this rule, please remove it from evaluating the configuration of AWS resources and replace it with the new ec2-security-group-attached-to-eni-periodic rule. The ec2-security-group-attached-to-eni-periodic rule will not be impacted by this deprecation as it is triggered on a periodic basis rather than on configuration changes.

Identifier: EC2_SECURITY_GROUP_ATTACHED_TO_ENI

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Asia Pacific (Jakarta), Asia Pacific (Osaka) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.