A collection of configuration templates for Amazon MQ resources as well as security controls for monitoring and protecting Amazon MQ configuration such as Config Rules, CloudWatch Alarms, EventBridge Rules, IAM policies, and more.
This template creates an Amazon MQ broker for ActiveMQ with customizable configuration and security settings. It allows you to easily deploy and manage an ActiveMQ messaging system in the cloud.
This template creates an Amazon MQ broker for RabbitMQ. It provisions a single-instance RabbitMQ broker with specified configurations, such as engine version, instance type, maintenance window, security groups, and subnet IDs. The template also allows you to specify a password for the Amazon MQ user.
This template creates an Amazon MQ configuration for an ACTIVEMQ engine with a specific version. The configuration sets a pending message limit strategy for topics and includes an empty plugins section.
This template creates an Amazon MQ configuration association.
Checks if automatic minor version upgrades are enabled for Amazon MQ brokers. The rule is NON_COMPLIANT if the 'AutoMinorVersionUpgrade' field is not enabled for an Amazon MQ broker.
Checks if Amazon MQ brokers have Amazon CloudWatch audit logging enabled. The rule is NON_COMPLIANT if a broker does not have audit logging enabled.
Checks if Amazon MQ brokers are not publicly accessible. The rule is NON_COMPLIANT if the 'PubliclyAccessible' field is set to true for an Amazon MQ broker.