AWS Config
Developer Guide

shield-drt-access

Verify that DDoS response team (DRT) can access AWS account. The rule is NON_COMPLIANT if AWS Shield Advanced is enabled but the role for DRT access is not configured.

Identifier: SHIELD_DRT_ACCESS

Trigger type: Periodic

AWS Regions: Only available in US East (N. Virginia) region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.