AWSTemplateFormatVersion: "2010-09-09"
Description: ""
Resources:
  ConfigRule:
    Type: "AWS::Config::ConfigRule"
    Properties:
      ConfigRuleName: "nacl-no-unrestricted-ssh-rdp"
      Scope:
        ComplianceResourceTypes:
          - "AWS::EC2::NetworkAcl"
      Description: "A Config rule that checks if default ports for SSH/RDP ingress traffic for network access control lists (NACLs) is unrestricted. The rule is NON_COMPLIANT if a NACL inbound entry allows a source TCP or UDP CIDR block for ports 22 or 3389."
      Source:
        Owner: "AWS"
        SourceIdentifier: "NACL_NO_UNRESTRICTED_SSH_RDP"
Parameters: {}
Metadata: {}
Conditions: {}