AWS Config
Developer Guide

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.


Checks whether your resources have the tags that you specify. For example, you can check whether your EC2 instances have the 'CostCenter' tag. Separate multiple values with commas.


The supported resource types for this rule are as follows:

  • ACM::Certificate

  • AutoScaling::AutoScalingGroup

  • CloudFormation::Stack

  • CodeBuild::Project

  • DynamoDB::Table

  • EC2::CustomerGateway

  • EC2::Instance

  • EC2::InternetGateway

  • EC2::NetworkAcl

  • EC2::NetworkInterface

  • EC2::RouteTable

  • EC2::SecurityGroup

  • EC2::Subnet

  • EC2::Volume

  • EC2::VPC

  • EC2::VPNConnection

  • EC2::VPNGateway

  • ElasticLoadBalancing::LoadBalancer

  • ElasticLoadBalancingV2::LoadBalancer

  • RDS::DBInstance

  • RDS::DBSecurityGroup

  • RDS::DBSnapshot

  • RDS::DBSubnetGroup

  • RDS::EventSubscription

  • Redshift::Cluster

  • Redshift::ClusterParameterGroup

  • Redshift::ClusterSecurityGroup

  • Redshift::ClusterSnapshot

  • Redshift::ClusterSubnetGroup

  • S3::Bucket


Trigger type: Configuration changes



Key of the required tag.


Optional value of the required tag. Separate multiple values with commas.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.

View Launch