A Config rule that checks whether an Application Load Balancer, Amazon CloudFront distributions, Elastic Load Balancer or Elastic IP has AWS Shield protection. This rule also checks if they have web ACL associated for Application Load Balancer and Amazon CloudFront distributions.

This config rule supports the following parameters:

  • webACLId
    • Required: Yes
    • Type: String
    • Description:The WebACLId of the web ACL.
  • resourceTypes
    • Required: Yes
    • Type: String
    • Description:The resource scope which this config rule will be applied to.
  • resourceTags
    • Required: No
    • Type: String
    • Description:The resource tags that the rule should be associated with (for example, { "tagKey1" : ["tagValue1"], "tagKey2" : ["tagValue2", "tagValue3"] }).
  • excludeResourceTags
    • Required: No
    • Type: boolean
    • Description:If true, exclude the resources that match the resourceTags. If false, include all the resources that match the resourceTags.
  • fmsManagedToken
    • Required: No
    • Type: String
    • Description:A token generated by AWS Firewall Manager when creating the rule in your account. AWS Config ignores this parameter when you create this rule.
  • fmsRemediationEnabled
    • Required: No
    • Type: boolean
    • Description:If true, AWS Firewall Manager will update NON_COMPLIANT resources according to FMS policy. AWS Config ignores this parameter when you create this rule.

CloudFormation Template