A Config rule that checks whether an Application Load Balancer, Amazon CloudFront distributions, Elastic Load Balancer or Elastic IP has AWS Shield protection. This rule also checks if they have web ACL associated for Application Load Balancer and Amazon CloudFront distributions.
This config rule supports the following parameters:
webACLId
Required: Yes
Type: String
Description:The WebACLId of the web ACL.
resourceTypes
Required: Yes
Type: String
Description:The resource scope which this config rule will be applied to.
resourceTags
Required: No
Type: String
Description:The resource tags that the rule should be associated with (for example, { "tagKey1" : ["tagValue1"], "tagKey2" : ["tagValue2", "tagValue3"] }).
excludeResourceTags
Required: No
Type: boolean
Description:If true, exclude the resources that match the resourceTags. If false, include all the resources that match the resourceTags.
fmsManagedToken
Required: No
Type: String
Description:A token generated by AWS Firewall Manager when creating the rule in your account. AWS Config ignores this parameter when you create this rule.
fmsRemediationEnabled
Required: No
Type: boolean
Description:If true, AWS Firewall Manager will update NON_COMPLIANT resources according to FMS policy. AWS Config ignores this parameter when you create this rule.