AWSTemplateFormatVersion: '2010-09-09'
Resources:
  ConfigRule:
    Type: 'AWS::Config::ConfigRule'
    Properties:
      ConfigRuleName: rds-snapshots-public-prohibited
      Description: >-
        A Config rule that checks if Amazon Relational Database Service (Amazon
        RDS) snapshots are public. The rule is non-compliant if any existing and
        new Amazon RDS snapshots are public.
      InputParameters: {}
      Scope:
        ComplianceResourceTypes:
          - 'AWS::RDS::DBSnapshot'
      Source:
        Owner: AWS
        SourceIdentifier: RDS_SNAPSHOTS_PUBLIC_PROHIBITED
Parameters: {}
Metadata: {}
Conditions: {}