A Config rule that checks if a AWS CodeBuild project configured with Amazon S3 Logs has encryption enabled for its logs. The rule is NON_COMPLIANT if encryptionDisabled is set to true in a S3LogsConfig of a CodeBuild project.

This config rule supports the following parameters:

  • exemptedProjects
    • Required: No
    • Type: CSV
    • Description:Comma-separated list of CodeBuild project names that are allowed to output unencrypted logs.

CloudFormation Template