A Config rule that checks if a REST API stage uses an Secure Sockets Layer (SSL) certificate. This rule is NON_COMPLIANT if the REST API stage does not have an associated SSL certificate.

This config rule supports the following parameters:

  • CertificateIDs
    • Required: No
    • Type: CSV
    • Description:Comma-separated list of client certificate IDs configured on a REST API stage.

CloudFormation Template

AWSTemplateFormatVersion: '2010-09-09'
Description: Check if REST API stage uses SSL certificate
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: undefined
      Description: undefined
      Source:
        Owner: undefined
        SourceIdentifier: undefined
      Scope:
        ComplianceResourceTypes:
          - undefined