Service Control Policies

Auto Remediation Rules

Conformance Packs

Amazon GuardDuty

Amazon Inspector

AWS Security Hub

AWS Network Firewall

Route53 Resolver Security

S3 Bucket Policies

CloudWatch Alarms and Event Rules

AWS Secrets Manager

AWS Systems Manager

Security Groups & NACLs

Config Rules

Internet Gateways Attached to Authorized VPCs Only Check

A config rule that checks that Internet gateways (IGWs) are only attached to an authorized Amazon Virtual Private Cloud (VPCs). The rule is NON_COMPLIANT if IGWs are not attached to an authorized VPC.

AWS Documentation

Items

1

Size

0.6 KB

AWSTemplateFormatVersion: "2010-09-09"
Description: ""
Resources:
  ConfigRule:
    Type: "AWS::Config::ConfigRule"
    Properties:
      ConfigRuleName: "internet-gateway-authorized-vpc-only"
      Scope:
        ComplianceResourceTypes:
          - "AWS::EC2::InternetGateway"
      Description: "A config rule that checks that Internet gateways (IGWs) are only attached to an authorized Amazon Virtual Private Cloud (VPCs). The rule is NON_COMPLIANT if IGWs are not attached to an authorized VPC."
      Source:
        Owner: "AWS"
        SourceIdentifier: "INTERNET_GATEWAY_AUTHORIZED_VPC_ONLY"
Parameters: {}
Metadata: {}
Conditions: {}

* Required field

A configuration package to enable AWS security logging and activity monitoring services: AWS CloudTrail, AWS Config, and Amazon GuardDuty. The package also includes an S3 bucket to store CloudTrail and Config history logs, as well as an optional CloudWatch log group to receive CloudTrail logs.

Configuration Package

A configuration package to deploy an Amazon VPC with predefined presets to select: Subnet Tiers (Public and Private), Availability Zones, and Internet Connectivity. Configuration includes Subnets, Routing Tables, Internet Gateway, Nat Gateways, and Security Groups

Configuration Package

Configuration to enable AWS Config including support configuration such as S3 Buckets and Iam Roles as required. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

Configuration Item

A configuration package to monitor VPC related API activity as well as configuration compliance rules to ensure the security of Amazon VPC configuration. The package includes Config Rules, CloudWatch Alarms, and CloudWatch Event Rules, and uses SNS to deliver email notifications. The package also includes configuration to enable the required AWS logging services: AWS CloudTrail, Config, and CloudWatch log groups.

Configuration Package