A Config rule that checks if a AWS CodeBuild project configured with Amazon S3 Logs has encryption enabled for its logs. The rule is NON_COMPLIANT if encryptionDisabled is set to true in a S3LogsConfig of a CodeBuild project.

This config rule supports the following parameters:

  • exemptedProjects
    • Required: No
    • Type: CSV
    • Description:Comma-separated list of CodeBuild project names that are allowed to output unencrypted logs.

ConfigRule
AWS::Config::ConfigRule


Scope

ComplianceResourceTypes

Source *
CustomPolicyDetails
SourceDetails

CloudFormation Template

Share Template