Checks if Amazon CloudWatch Log Groups are encrypted with any AWS KMS key or a specified AWS KMS key Id. The rule is NON_COMPLIANT if a CloudWatch Log Group is not encrypted with a KMS key or is encrypted with a KMS key not supplied in the rule parameter.
Identifier: CLOUDWATCH_LOG_GROUP_ENCRYPTED
Resource Types: AWS::Logs::LogGroup
Trigger type: Periodic
AWS Region: All supported AWS regions except Middle East (UAE), Asia Pacific (Taipei) Region
Parameters:
Amazon Resource Name (ARN) of the ID for the KMS key that is used to encrypt the log group.
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
cloudwatch-alarm-settings-check
cloudwatch-metric-stream-tagged
Did this page help you? - Yes
Thanks for letting us know we're doing a good job!
If you've got a moment, please tell us what we did right so we can do more of it.
Did this page help you? - No
Thanks for letting us know this page needs work. We're sorry we let you down.
If you've got a moment, please tell us how we can make the documentation better.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4