Overview

A config rule that checks whether your EC2 instances are of the specified instance types.

This config rule supports Auto Remediation actions using SSM Automation. The following actions are supported:

  • Stop Instance: Non-compliant instances are stopped.
  • Terminate Instance: Non-compliant instances are terminated (Be careful when selecting this option to not accidentally terminate existing resources).

In addition to an action, a notification using an SNS Topic can be added to send a custom message when a non-compliant resource is detected. (Make sure to update the email address from the default email@example.com)

Configuration Templates

Items
1
Size
0.5 KB
Missing Parameters
AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: desired-instance-type
      Description: >-
        A config rule that checks whether your EC2 instances are of the
        specified instance types.
      Scope:
        ComplianceResourceTypes:
          - 'AWS::EC2::Instance'
      Source:
        Owner: AWS
        SourceIdentifier: DESIRED_INSTANCE_TYPE
Parameters: {}
Metadata: {}
Conditions: {}

Actions



Rule Parameters

 
  
* Required field

Sources and Documentation

Configuration Source: AWS Documentation

Additional Documentation: