bedrockagentcore-gateway-encryption-enabled

Checks whether an Amazon Bedrock AgentCore Gateway is encrypted with a customer-managed KMS key. The rule is NON_COMPLIANT if the gateway does not have KmsKeyArn configured.

Identifier: BEDROCKAGENTCORE_GATEWAY_ENCRYPTION_ENABLED

Resource Types: AWS::BedrockAgentCore::Gateway

Trigger type: Configuration changes

AWS Region: Only available in Europe (Stockholm), Asia Pacific (Mumbai), Europe (Paris), US East (Ohio), Europe (Ireland), Europe (Frankfurt), US East (N. Virginia), Asia Pacific (Seoul), Europe (London), Asia Pacific (Tokyo), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.