ManagedRuleIdentifiers (software.amazon.awscdk:aws-cdk-lib 2.42.1 API)

java.lang.Object
- software.amazon.jsii.JsiiObject
- - software.amazon.awscdk.services.config.ManagedRuleIdentifiers

All Implemented Interfaces:: software.amazon.jsii.JsiiSerializable

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-19T20:26:37.753Z")
 @Stability(value=Stable)
public class ManagedRuleIdentifiers
extends software.amazon.jsii.JsiiObject

Managed rules that are supported by AWS Config.

Example:

 // https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
 // https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
 ManagedRule.Builder.create(this, "AccessKeysRotated")
         .identifier(ManagedRuleIdentifiers.ACCESS_KEYS_ROTATED)
         .inputParameters(Map.of(
                 "maxAccessKeyAge", 60))
         // default is 24 hours
         .maximumExecutionFrequency(MaximumExecutionFrequency.TWELVE_HOURS)
         .build();

See Also:: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html

Nested Class Summary
- Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
  software.amazon.jsii.JsiiObject.InitializationMode

Field Summary

Fields
Modifier and Type	Field and Description
`static String`	`ACCESS_KEYS_ROTATED` Checks whether the active access keys are rotated within the number of days specified in maxAccessKeyAge.
`static String`	`ACCOUNT_PART_OF_ORGANIZATIONS` Checks whether AWS account is part of AWS Organizations.
`static String`	`ACM_CERTIFICATE_EXPIRATION_CHECK` Checks whether ACM Certificates in your account are marked for expiration within the specified number of days.
`static String`	`ALB_HTTP_DROP_INVALID_HEADER_ENABLED` Checks if rule evaluates Application Load Balancers (ALBs) to ensure they are configured to drop http headers.
`static String`	`ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK` Checks whether HTTP to HTTPS redirection is configured on all HTTP listeners of Application Load Balancer.
`static String`	`ALB_WAF_ENABLED` Checks if Web Application Firewall (WAF) is enabled on Application Load Balancers (ALBs).
`static String`	`API_GW_CACHE_ENABLED_AND_ENCRYPTED` Checks that all methods in Amazon API Gateway stages have caching enabled and encrypted.
`static String`	`API_GW_ENDPOINT_TYPE_CHECK` Checks that Amazon API Gateway APIs are of the type specified in the rule parameter endpointConfigurationType.
`static String`	`API_GW_EXECUTION_LOGGING_ENABLED` Checks that all methods in Amazon API Gateway stage has logging enabled.
`static String`	`APPROVED_AMIS_BY_ID` Checks whether running instances are using specified AMIs.
`static String`	`APPROVED_AMIS_BY_TAG` Checks whether running instances are using specified AMIs.
`static String`	`AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED` Checks whether your Auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.
`static String`	`CLOUD_TRAIL_CLOUD_WATCH_LOGS_ENABLED` Checks whether AWS CloudTrail trails are configured to send logs to Amazon CloudWatch Logs.
`static String`	`CLOUD_TRAIL_ENABLED` Checks whether AWS CloudTrail is enabled in your AWS account.
`static String`	`CLOUD_TRAIL_ENCRYPTION_ENABLED` Checks whether AWS CloudTrail is configured to use the server side encryption (SSE) AWS Key Management Service (AWS KMS) customer master key (CMK) encryption.
`static String`	`CLOUD_TRAIL_LOG_FILE_VALIDATION_ENABLED` Checks whether AWS CloudTrail creates a signed digest file with logs.
`static String`	`CLOUDFORMATION_STACK_DRIFT_DETECTION_CHECK` Checks whether an AWS CloudFormation stack's actual configuration differs, or has drifted, from it's expected configuration.
`static String`	`CLOUDFORMATION_STACK_NOTIFICATION_CHECK` Checks whether your CloudFormation stacks are sending event notifications to an SNS topic.
`static String`	`CLOUDFRONT_DEFAULT_ROOT_OBJECT_CONFIGURED` Checks if an Amazon CloudFront distribution is configured to return a specific object that is the default root object.
`static String`	`CLOUDFRONT_ORIGIN_ACCESS_IDENTITY_ENABLED` Checks that Amazon CloudFront distribution with Amazon S3 Origin type has Origin Access Identity (OAI) configured.
`static String`	`CLOUDFRONT_ORIGIN_FAILOVER_ENABLED` Checks whether an origin group is configured for the distribution of at least 2 origins in the origin group for Amazon CloudFront.
`static String`	`CLOUDFRONT_SNI_ENABLED` Checks if Amazon CloudFront distributions are using a custom SSL certificate and are configured to use SNI to serve HTTPS requests.
`static String`	`CLOUDFRONT_VIEWER_POLICY_HTTPS` Checks whether your Amazon CloudFront distributions use HTTPS (directly or via a redirection).
`static String`	`CLOUDTRAIL_MULTI_REGION_ENABLED` Checks that there is at least one multi-region AWS CloudTrail.
`static String`	`CLOUDTRAIL_S3_DATAEVENTS_ENABLED` Checks whether at least one AWS CloudTrail trail is logging Amazon S3 data events for all S3 buckets.
`static String`	`CLOUDTRAIL_SECURITY_TRAIL_ENABLED` Checks that there is at least one AWS CloudTrail trail defined with security best practices.
`static String`	`CLOUDWATCH_ALARM_ACTION_CHECK` Checks whether CloudWatch alarms have at least one alarm action, one INSUFFICIENT_DATA action, or one OK action enabled.
`static String`	`CLOUDWATCH_ALARM_RESOURCE_CHECK` Checks whether the specified resource type has a CloudWatch alarm for the specified metric.
`static String`	`CLOUDWATCH_ALARM_SETTINGS_CHECK` Checks whether CloudWatch alarms with the given metric name have the specified settings.
`static String`	`CLOUDWATCH_LOG_GROUP_ENCRYPTED` Checks whether a log group in Amazon CloudWatch Logs is encrypted with a AWS Key Management Service (KMS) managed Customer Master Keys (CMK).
`static String`	`CMK_BACKING_KEY_ROTATION_ENABLED` Checks that key rotation is enabled for each key and matches to the key ID of the customer created customer master key (CMK).
`static String`	`CODEBUILD_PROJECT_ENVVAR_AWSCRED_CHECK` Checks whether the project contains environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.
`static String`	`CODEBUILD_PROJECT_SOURCE_REPO_URL_CHECK` Checks whether the GitHub or Bitbucket source repository URL contains either personal access tokens or user name and password.
`static String`	`CODEPIPELINE_DEPLOYMENT_COUNT_CHECK` Checks whether the first deployment stage of the AWS CodePipeline performs more than one deployment.
`static String`	`CODEPIPELINE_REGION_FANOUT_CHECK` Checks whether each stage in the AWS CodePipeline deploys to more than N times the number of the regions the AWS CodePipeline has deployed in all the previous combined stages, where N is the region fanout number.
`static String`	`CW_LOGGROUP_RETENTION_PERIOD_CHECK` Checks whether Amazon CloudWatch LogGroup retention period is set to specific number of days.
`static String`	`DAX_ENCRYPTION_ENABLED` Checks that DynamoDB Accelerator (DAX) clusters are encrypted.
`static String`	`DMS_REPLICATION_NOT_PUBLIC` Checks whether AWS Database Migration Service replication instances are public.
`static String`	`DYNAMODB_AUTOSCALING_ENABLED` Checks whether Auto Scaling or On-Demand is enabled on your DynamoDB tables and/or global secondary indexes.
`static String`	`DYNAMODB_IN_BACKUP_PLAN` Checks whether Amazon DynamoDB table is present in AWS Backup plans.
`static String`	`DYNAMODB_PITR_ENABLED` Checks that point in time recovery (PITR) is enabled for Amazon DynamoDB tables.
`static String`	`DYNAMODB_TABLE_ENCRYPTED_KMS` Checks whether Amazon DynamoDB table is encrypted with AWS Key Management Service (KMS).
`static String`	`DYNAMODB_TABLE_ENCRYPTION_ENABLED` Checks whether the Amazon DynamoDB tables are encrypted and checks their status.
`static String`	`DYNAMODB_THROUGHPUT_LIMIT_CHECK` Checks whether provisioned DynamoDB throughput is approaching the maximum limit for your account.
`static String`	`EBS_ENCRYPTED_VOLUMES` Checks whether the EBS volumes that are in an attached state are encrypted.
`static String`	`EBS_IN_BACKUP_PLAN` Checks if Amazon Elastic Block Store (Amazon EBS) volumes are added in backup plans of AWS Backup.
`static String`	`EBS_OPTIMIZED_INSTANCE` Checks whether EBS optimization is enabled for your EC2 instances that can be EBS-optimized.
`static String`	`EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK` Checks whether Amazon Elastic Block Store snapshots are not publicly restorable.
`static String`	`EC2_DESIRED_INSTANCE_TENANCY` Checks instances for specified tenancy.
`static String`	`EC2_DESIRED_INSTANCE_TYPE` Checks whether your EC2 instances are of the specified instance types.
`static String`	`EC2_EBS_ENCRYPTION_BY_DEFAULT` Check that Amazon Elastic Block Store (EBS) encryption is enabled by default.
`static String`	`EC2_IMDSV2_CHECK` Checks whether your Amazon Elastic Compute Cloud (Amazon EC2) instance metadata version is configured with Instance Metadata Service Version 2 (IMDSv2).
`static String`	`EC2_INSTANCE_DETAILED_MONITORING_ENABLED` Checks whether detailed monitoring is enabled for EC2 instances.
`static String`	`EC2_INSTANCE_MANAGED_BY_SSM` Checks whether the Amazon EC2 instances in your account are managed by AWS Systems Manager.
`static String`	`EC2_INSTANCE_NO_PUBLIC_IP` Checks whether Amazon Elastic Compute Cloud (Amazon EC2) instances have a public IP association.
`static String`	`EC2_INSTANCE_PROFILE_ATTACHED` Checks if an Amazon Elastic Compute Cloud (Amazon EC2) instance has an Identity and Access Management (IAM) profile attached to it.
`static String`	`EC2_INSTANCES_IN_VPC` Checks whether your EC2 instances belong to a virtual private cloud (VPC).
`static String`	`EC2_MANAGED_INSTANCE_APPLICATIONS_BLOCKED` Checks that none of the specified applications are installed on the instance.
`static String`	`EC2_MANAGED_INSTANCE_APPLICATIONS_REQUIRED` Checks whether all of the specified applications are installed on the instance.
`static String`	`EC2_MANAGED_INSTANCE_ASSOCIATION_COMPLIANCE_STATUS_CHECK` Checks whether the compliance status of AWS Systems Manager association compliance is COMPLIANT or NON_COMPLIANT after the association execution on the instance.
`static String`	`EC2_MANAGED_INSTANCE_INVENTORY_BLOCKED` Checks whether instances managed by AWS Systems Manager are configured to collect blocked inventory types.
`static String`	`EC2_MANAGED_INSTANCE_PATCH_COMPLIANCE_STATUS_CHECK` Checks whether the compliance status of the Amazon EC2 Systems Manager patch compliance is COMPLIANT or NON_COMPLIANT after the patch installation on the instance.
`static String`	`EC2_MANAGED_INSTANCE_PLATFORM_CHECK` Checks whether EC2 managed instances have the desired configurations.
`static String`	`EC2_SECURITY_GROUP_ATTACHED_TO_ENI` Checks that security groups are attached to Amazon Elastic Compute Cloud (Amazon EC2) instances or to an elastic network interface.
`static String`	`EC2_SECURITY_GROUPS_INCOMING_SSH_DISABLED` Checks whether the incoming SSH traffic for the security groups is accessible.
`static String`	`EC2_SECURITY_GROUPS_RESTRICTED_INCOMING_TRAFFIC` Checks whether the security groups in use do not allow unrestricted incoming TCP traffic to the specified ports.
`static String`	`EC2_STOPPED_INSTANCE` Checks whether there are instances stopped for more than the allowed number of days.
`static String`	`EC2_VOLUME_INUSE_CHECK` Checks whether EBS volumes are attached to EC2 instances.
`static String`	`EFS_ENCRYPTED_CHECK` hecks whether Amazon Elastic File System (Amazon EFS) is configured to encrypt the file data using AWS Key Management Service (AWS KMS).
`static String`	`EFS_IN_BACKUP_PLAN` Checks whether Amazon Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup.
`static String`	`EIP_ATTACHED` Checks whether all Elastic IP addresses that are allocated to a VPC are attached to EC2 instances or in-use elastic network interfaces (ENIs).
`static String`	`EKS_CLUSTER_OLDEST_SUPPORTED_VERSION` Checks if an Amazon Elastic Kubernetes Service (EKS) cluster is running the oldest supported version.
`static String`	`EKS_CLUSTER_SUPPORTED_VERSION` Checks if an Amazon Elastic Kubernetes Service (EKS) cluster is running a supported Kubernetes version.
`static String`	`EKS_ENDPOINT_NO_PUBLIC_ACCESS` Checks whether Amazon Elastic Kubernetes Service (Amazon EKS) endpoint is not publicly accessible.
`static String`	`EKS_SECRETS_ENCRYPTED` Checks whether Amazon Elastic Kubernetes Service clusters are configured to have Kubernetes secrets encrypted using AWS Key Management Service (KMS) keys.
`static String`	`ELASTICACHE_REDIS_CLUSTER_AUTOMATIC_BACKUP_CHECK` Check if the Amazon ElastiCache Redis clusters have automatic backup turned on.
`static String`	`ELASTICSEARCH_ENCRYPTED_AT_REST` Checks whether Amazon Elasticsearch Service (Amazon ES) domains have encryption at rest configuration enabled.
`static String`	`ELASTICSEARCH_IN_VPC_ONLY` Checks whether Amazon Elasticsearch Service (Amazon ES) domains are in Amazon Virtual Private Cloud (Amazon VPC).
`static String`	`ELASTICSEARCH_NODE_TO_NODE_ENCRYPTION_CHECK` Check that Amazon ElasticSearch Service nodes are encrypted end to end.
`static String`	`ELB_ACM_CERTIFICATE_REQUIRED` Checks whether the Classic Load Balancers use SSL certificates provided by AWS Certificate Manager.
`static String`	`ELB_CROSS_ZONE_LOAD_BALANCING_ENABLED` Checks if cross-zone load balancing is enabled for the Classic Load Balancers (CLBs).
`static String`	`ELB_CUSTOM_SECURITY_POLICY_SSL_CHECK` Checks whether your Classic Load Balancer SSL listeners are using a custom policy.
`static String`	`ELB_DELETION_PROTECTION_ENABLED` Checks whether Elastic Load Balancing has deletion protection enabled.
`static String`	`ELB_LOGGING_ENABLED` Checks whether the Application Load Balancer and the Classic Load Balancer have logging enabled.
`static String`	`ELB_PREDEFINED_SECURITY_POLICY_SSL_CHECK` Checks whether your Classic Load Balancer SSL listeners are using a predefined policy.
`static String`	`ELB_TLS_HTTPS_LISTENERS_ONLY` Checks whether your Classic Load Balancer is configured with SSL or HTTPS listeners.
`static String`	`EMR_KERBEROS_ENABLED` Checks that Amazon EMR clusters have Kerberos enabled.
`static String`	`EMR_MASTER_NO_PUBLIC_IP` Checks whether Amazon Elastic MapReduce (EMR) clusters' master nodes have public IPs.
`static String`	`FMS_SECURITY_GROUP_AUDIT_POLICY_CHECK` Checks whether the security groups associated inScope resources are compliant with the master security groups at each rule level based on allowSecurityGroup and denySecurityGroup flag.
`static String`	`FMS_SECURITY_GROUP_CONTENT_CHECK` Checks whether AWS Firewall Manager created security groups content is the same as the master security groups.
`static String`	`FMS_SECURITY_GROUP_RESOURCE_ASSOCIATION_CHECK` Checks whether Amazon EC2 or an elastic network interface is associated with AWS Firewall Manager security groups.
`static String`	`FMS_SHIELD_RESOURCE_POLICY_CHECK` Checks whether an Application Load Balancer, Amazon CloudFront distributions, Elastic Load Balancer or Elastic IP has AWS Shield protection.
`static String`	`FMS_WEBACL_RESOURCE_POLICY_CHECK` Checks whether the web ACL is associated with an Application Load Balancer, API Gateway stage, or Amazon CloudFront distributions.
`static String`	`FMS_WEBACL_RULEGROUP_ASSOCIATION_CHECK` Checks that the rule groups associate with the web ACL at the correct priority.
`static String`	`GUARDDUTY_ENABLED_CENTRALIZED` Checks whether Amazon GuardDuty is enabled in your AWS account and region.
`static String`	`GUARDDUTY_NON_ARCHIVED_FINDINGS` Checks whether the Amazon GuardDuty has findings that are non archived.
`static String`	`IAM_CUSTOMER_POLICY_BLOCKED_KMS_ACTIONS` Checks that the managed AWS Identity and Access Management policies that you create do not allow blocked actions on all AWS AWS KMS keys.
`static String`	`IAM_GROUP_HAS_USERS_CHECK` Checks whether IAM groups have at least one IAM user.
`static String`	`IAM_INLINE_POLICY_BLOCKED_KMS_ACTIONS` Checks that the inline policies attached to your AWS Identity and Access Management users, roles, and groups do not allow blocked actions on all AWS Key Management Service keys.
`static String`	`IAM_NO_INLINE_POLICY_CHECK` Checks that inline policy feature is not in use.
`static String`	`IAM_PASSWORD_POLICY` Checks whether the account password policy for IAM users meets the specified requirements indicated in the parameters.
`static String`	`IAM_POLICY_BLOCKED_CHECK` Checks whether for each IAM resource, a policy ARN in the input parameter is attached to the IAM resource.
`static String`	`IAM_POLICY_IN_USE` Checks whether the IAM policy ARN is attached to an IAM user, or an IAM group with one or more IAM users, or an IAM role with one or more trusted entity.
`static String`	`IAM_POLICY_NO_STATEMENTS_WITH_ADMIN_ACCESS` Checks the IAM policies that you create for Allow statements that grant permissions to all actions on all resources.
`static String`	`IAM_ROLE_MANAGED_POLICY_CHECK` Checks that AWS Identity and Access Management (IAM) policies in a list of policies are attached to all AWS roles.
`static String`	`IAM_ROOT_ACCESS_KEY_CHECK` Checks whether the root user access key is available.
`static String`	`IAM_USER_GROUP_MEMBERSHIP_CHECK` Checks whether IAM users are members of at least one IAM group.
`static String`	`IAM_USER_MFA_ENABLED` Checks whether the AWS Identity and Access Management users have multi-factor authentication (MFA) enabled.
`static String`	`IAM_USER_NO_POLICIES_CHECK` Checks that none of your IAM users have policies attached.
`static String`	`IAM_USER_UNUSED_CREDENTIALS_CHECK` Checks whether your AWS Identity and Access Management (IAM) users have passwords or active access keys that have not been used within the specified number of days you provided.
`static String`	`INTERNET_GATEWAY_AUTHORIZED_VPC_ONLY` Checks that Internet gateways (IGWs) are only attached to an authorized Amazon Virtual Private Cloud (VPCs).
`static String`	`KMS_CMK_NOT_SCHEDULED_FOR_DELETION` Checks whether customer master keys (CMKs) are not scheduled for deletion in AWS Key Management Service (KMS).
`static String`	`LAMBDA_CONCURRENCY_CHECK` Checks whether the AWS Lambda function is configured with function-level concurrent execution limit.
`static String`	`LAMBDA_DLQ_CHECK` Checks whether an AWS Lambda function is configured with a dead-letter queue.
`static String`	`LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED` Checks whether the AWS Lambda function policy attached to the Lambda resource prohibits public access.
`static String`	`LAMBDA_FUNCTION_SETTINGS_CHECK` Checks that the lambda function settings for runtime, role, timeout, and memory size match the expected values.
`static String`	`LAMBDA_INSIDE_VPC` Checks whether an AWS Lambda function is in an Amazon Virtual Private Cloud.
`static String`	`MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS` Checks whether AWS Multi-Factor Authentication (MFA) is enabled for all IAM users that use a console password.
`static String`	`RDS_CLUSTER_DELETION_PROTECTION_ENABLED` Checks if an Amazon Relational Database Service (Amazon RDS) cluster has deletion protection enabled.
`static String`	`RDS_DB_INSTANCE_BACKUP_ENABLED` Checks whether RDS DB instances have backups enabled.
`static String`	`RDS_ENHANCED_MONITORING_ENABLED` Checks whether enhanced monitoring is enabled for Amazon Relational Database Service (Amazon RDS) instances.
`static String`	`RDS_IN_BACKUP_PLAN` Checks whether Amazon RDS database is present in back plans of AWS Backup.
`static String`	`RDS_INSTANCE_DELETION_PROTECTION_ENABLED` Checks if an Amazon Relational Database Service (Amazon RDS) instance has deletion protection enabled.
`static String`	`RDS_INSTANCE_IAM_AUTHENTICATION_ENABLED` Checks if an Amazon RDS instance has AWS Identity and Access Management (IAM) authentication enabled.
`static String`	`RDS_INSTANCE_PUBLIC_ACCESS_CHECK` Check whether the Amazon Relational Database Service instances are not publicly accessible.
`static String`	`RDS_LOGGING_ENABLED` Checks that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled.
`static String`	`RDS_MULTI_AZ_SUPPORT` Checks whether high availability is enabled for your RDS DB instances.
`static String`	`RDS_SNAPSHOT_ENCRYPTED` Checks whether Amazon Relational Database Service (Amazon RDS) DB snapshots are encrypted.
`static String`	`RDS_SNAPSHOTS_PUBLIC_PROHIBITED` Checks if Amazon Relational Database Service (Amazon RDS) snapshots are public.
`static String`	`RDS_STORAGE_ENCRYPTED` Checks whether storage encryption is enabled for your RDS DB instances.
`static String`	`REDSHIFT_BACKUP_ENABLED` Checks that Amazon Redshift automated snapshots are enabled for clusters.
`static String`	`REDSHIFT_CLUSTER_CONFIGURATION_CHECK` Checks whether Amazon Redshift clusters have the specified settings.
`static String`	`REDSHIFT_CLUSTER_MAINTENANCE_SETTINGS_CHECK` Checks whether Amazon Redshift clusters have the specified maintenance settings.
`static String`	`REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK` Checks whether Amazon Redshift clusters are not publicly accessible.
`static String`	`REDSHIFT_REQUIRE_TLS_SSL` Checks whether Amazon Redshift clusters require TLS/SSL encryption to connect to SQL clients.
`static String`	`REQUIRED_TAGS` Checks whether your resources have the tags that you specify.
`static String`	`ROOT_ACCOUNT_HARDWARE_MFA_ENABLED` Checks whether your AWS account is enabled to use multi-factor authentication (MFA) hardware device to sign in with root credentials.
`static String`	`ROOT_ACCOUNT_MFA_ENABLED` Checks whether users of your AWS account require a multi-factor authentication (MFA) device to sign in with root credentials.
`static String`	`S3_ACCOUNT_LEVEL_PUBLIC_ACCESS_BLOCKS` Checks whether the required public access block settings are configured from account level.
`static String`	`S3_BUCKET_BLOCKED_ACTIONS_PROHIBITED` Checks that the Amazon Simple Storage Service bucket policy does not allow blocked bucket-level and object-level actions on resources in the bucket for principals from other AWS accounts.
`static String`	`S3_BUCKET_DEFAULT_LOCK_ENABLED` Checks whether Amazon Simple Storage Service (Amazon S3) bucket has lock enabled, by default.
`static String`	`S3_BUCKET_LEVEL_PUBLIC_ACCESS_PROHIBITED` Checks if Amazon Simple Storage Service (Amazon S3) buckets are publicly accessible.
`static String`	`S3_BUCKET_LOGGING_ENABLED` Checks whether logging is enabled for your S3 buckets.
`static String`	`S3_BUCKET_POLICY_GRANTEE_CHECK` Checks that the access granted by the Amazon S3 bucket is restricted by any of the AWS principals, federated users, service principals, IP addresses, or VPCs that you provide.
`static String`	`S3_BUCKET_POLICY_NOT_MORE_PERMISSIVE` Verifies that your Amazon Simple Storage Service bucket policies do not allow other inter-account permissions than the control Amazon S3 bucket policy provided.
`static String`	`S3_BUCKET_PUBLIC_READ_PROHIBITED` Checks that your Amazon S3 buckets do not allow public read access.
`static String`	`S3_BUCKET_PUBLIC_WRITE_PROHIBITED` Checks that your Amazon S3 buckets do not allow public write access.
`static String`	`S3_BUCKET_REPLICATION_ENABLED` Checks whether S3 buckets have cross-region replication enabled.
`static String`	`S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED` Checks that your Amazon S3 bucket either has Amazon S3 default encryption enabled or that the S3 bucket policy explicitly denies put-object requests without server side encryption that uses AES-256 or AWS Key Management Service.
`static String`	`S3_BUCKET_SSL_REQUESTS_ONLY` Checks whether S3 buckets have policies that require requests to use Secure Socket Layer (SSL).
`static String`	`S3_BUCKET_VERSIONING_ENABLED` Checks whether versioning is enabled for your S3 buckets.
`static String`	`S3_DEFAULT_ENCRYPTION_KMS` Checks whether the Amazon Simple Storage Service (Amazon S3) buckets are encrypted with AWS Key Management Service (AWS KMS).
`static String`	`SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED` Checks whether AWS Key Management Service (KMS) key is configured for an Amazon SageMaker endpoint configuration.
`static String`	`SAGEMAKER_NOTEBOOK_INSTANCE_KMS_KEY_CONFIGURED` Check whether an AWS Key Management Service (KMS) key is configured for SageMaker notebook instance.
`static String`	`SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS` Checks whether direct internet access is disabled for an Amazon SageMaker notebook instance.
`static String`	`SECRETSMANAGER_ROTATION_ENABLED_CHECK` Checks whether AWS Secrets Manager secret has rotation enabled.
`static String`	`SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK` Checks whether AWS Secrets Manager secret rotation has rotated successfully as per the rotation schedule.
`static String`	`SECURITYHUB_ENABLED` Checks that AWS Security Hub is enabled for an AWS account.
`static String`	`SERVICE_VPC_ENDPOINT_ENABLED` Checks whether Service Endpoint for the service provided in rule parameter is created for each Amazon VPC.
`static String`	`SHIELD_ADVANCED_ENABLED_AUTO_RENEW` Checks whether EBS volumes are attached to EC2 instances.
`static String`	`SHIELD_DRT_ACCESS` Verify that DDoS response team (DRT) can access AWS account.
`static String`	`SNS_ENCRYPTED_KMS` Checks whether Amazon SNS topic is encrypted with AWS Key Management Service (AWS KMS).
`static String`	`VPC_DEFAULT_SECURITY_GROUP_CLOSED` Checks that the default security group of any Amazon Virtual Private Cloud (VPC) does not allow inbound or outbound traffic.
`static String`	`VPC_FLOW_LOGS_ENABLED` Checks whether Amazon Virtual Private Cloud flow logs are found and enabled for Amazon VPC.
`static String`	`VPC_SG_OPEN_ONLY_TO_AUTHORIZED_PORTS` Checks whether the security group with 0.0.0.0/0 of any Amazon Virtual Private Cloud (Amazon VPC) allows only specific inbound TCP or UDP traffic.
`static String`	`VPC_VPN_2_TUNNELS_UP` Checks that both AWS Virtual Private Network tunnels provided by AWS Site-to-Site VPN are in UP status.
`static String`	`WAF_CLASSIC_LOGGING_ENABLED` Checks if logging is enabled on AWS Web Application Firewall (WAF) classic global web ACLs.
`static String`	`WAFV2_LOGGING_ENABLED` Checks whether logging is enabled on AWS Web Application Firewall (WAFV2) regional and global web access control list (ACLs).

Constructor Summary

Constructors
Modifier	Constructor and Description
`protected`	`ManagedRuleIdentifiers(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)`
`protected`	`ManagedRuleIdentifiers(software.amazon.jsii.JsiiObjectRef objRef)`

Method Summary
- Methods inherited from class software.amazon.jsii.JsiiObject
  jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
- Methods inherited from class java.lang.Object
  clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
- Methods inherited from interface software.amazon.jsii.JsiiSerializable
  $jsii$toJson

- Field Detail
  - ACCESS_KEYS_ROTATED
```
@Stability(value=Stable)
public static final String ACCESS_KEYS_ROTATED
```
    Checks whether the active access keys are rotated within the number of days specified in maxAccessKeyAge.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html
  - ACCOUNT_PART_OF_ORGANIZATIONS
```
@Stability(value=Stable)
public static final String ACCOUNT_PART_OF_ORGANIZATIONS
```
    Checks whether AWS account is part of AWS Organizations.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/account-part-of-organizations.html
  - ACM_CERTIFICATE_EXPIRATION_CHECK
```
@Stability(value=Stable)
public static final String ACM_CERTIFICATE_EXPIRATION_CHECK
```
    Checks whether ACM Certificates in your account are marked for expiration within the specified number of days.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html
  - ALB_HTTP_DROP_INVALID_HEADER_ENABLED
```
@Stability(value=Stable)
public static final String ALB_HTTP_DROP_INVALID_HEADER_ENABLED
```
    Checks if rule evaluates Application Load Balancers (ALBs) to ensure they are configured to drop http headers.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/alb-http-drop-invalid-header-enabled.html
  - ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK
```
@Stability(value=Stable)
public static final String ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK
```
    Checks whether HTTP to HTTPS redirection is configured on all HTTP listeners of Application Load Balancer.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/alb-http-to-https-redirection-check.html
  - ALB_WAF_ENABLED
```
@Stability(value=Stable)
public static final String ALB_WAF_ENABLED
```
    Checks if Web Application Firewall (WAF) is enabled on Application Load Balancers (ALBs).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/alb-waf-enabled.html
  - API_GW_CACHE_ENABLED_AND_ENCRYPTED
```
@Stability(value=Stable)
public static final String API_GW_CACHE_ENABLED_AND_ENCRYPTED
```
    Checks that all methods in Amazon API Gateway stages have caching enabled and encrypted.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/api-gw-cache-enabled-and-encrypted.html
  - API_GW_ENDPOINT_TYPE_CHECK
```
@Stability(value=Stable)
public static final String API_GW_ENDPOINT_TYPE_CHECK
```
    Checks that Amazon API Gateway APIs are of the type specified in the rule parameter endpointConfigurationType.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/api-gw-endpoint-type-check.html
  - API_GW_EXECUTION_LOGGING_ENABLED
```
@Stability(value=Stable)
public static final String API_GW_EXECUTION_LOGGING_ENABLED
```
    Checks that all methods in Amazon API Gateway stage has logging enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/api-gw-execution-logging-enabled.html
  - APPROVED_AMIS_BY_ID
```
@Stability(value=Stable)
public static final String APPROVED_AMIS_BY_ID
```
    Checks whether running instances are using specified AMIs.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/approved-amis-by-id.html
  - APPROVED_AMIS_BY_TAG
```
@Stability(value=Stable)
public static final String APPROVED_AMIS_BY_TAG
```
    Checks whether running instances are using specified AMIs.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/approved-amis-by-tag.html
  - AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED
```
@Stability(value=Stable)
public static final String AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED
```
    Checks whether your Auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-group-elb-healthcheck-required.html
  - CLOUD_TRAIL_CLOUD_WATCH_LOGS_ENABLED
```
@Stability(value=Stable)
public static final String CLOUD_TRAIL_CLOUD_WATCH_LOGS_ENABLED
```
    Checks whether AWS CloudTrail trails are configured to send logs to Amazon CloudWatch Logs.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-cloud-watch-logs-enabled.html
  - CLOUD_TRAIL_ENABLED
```
@Stability(value=Stable)
public static final String CLOUD_TRAIL_ENABLED
```
    Checks whether AWS CloudTrail is enabled in your AWS account.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-enabled.html
  - CLOUD_TRAIL_ENCRYPTION_ENABLED
```
@Stability(value=Stable)
public static final String CLOUD_TRAIL_ENCRYPTION_ENABLED
```
    Checks whether AWS CloudTrail is configured to use the server side encryption (SSE) AWS Key Management Service (AWS KMS) customer master key (CMK) encryption.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-encryption-enabled.html
  - CLOUD_TRAIL_LOG_FILE_VALIDATION_ENABLED
```
@Stability(value=Stable)
public static final String CLOUD_TRAIL_LOG_FILE_VALIDATION_ENABLED
```
    Checks whether AWS CloudTrail creates a signed digest file with logs.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-log-file-validation-enabled.html
  - CLOUDFORMATION_STACK_DRIFT_DETECTION_CHECK
```
@Stability(value=Stable)
public static final String CLOUDFORMATION_STACK_DRIFT_DETECTION_CHECK
```
    Checks whether an AWS CloudFormation stack's actual configuration differs, or has drifted, from it's expected configuration.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-check.html
  - CLOUDFORMATION_STACK_NOTIFICATION_CHECK
```
@Stability(value=Stable)
public static final String CLOUDFORMATION_STACK_NOTIFICATION_CHECK
```
    Checks whether your CloudFormation stacks are sending event notifications to an SNS topic.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-notification-check.html
  - CLOUDFRONT_DEFAULT_ROOT_OBJECT_CONFIGURED
```
@Stability(value=Stable)
public static final String CLOUDFRONT_DEFAULT_ROOT_OBJECT_CONFIGURED
```
    Checks if an Amazon CloudFront distribution is configured to return a specific object that is the default root object.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-default-root-object-configured.html
  - CLOUDFRONT_ORIGIN_ACCESS_IDENTITY_ENABLED
```
@Stability(value=Stable)
public static final String CLOUDFRONT_ORIGIN_ACCESS_IDENTITY_ENABLED
```
    Checks that Amazon CloudFront distribution with Amazon S3 Origin type has Origin Access Identity (OAI) configured.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-origin-access-identity-enabled.html
  - CLOUDFRONT_ORIGIN_FAILOVER_ENABLED
```
@Stability(value=Stable)
public static final String CLOUDFRONT_ORIGIN_FAILOVER_ENABLED
```
    Checks whether an origin group is configured for the distribution of at least 2 origins in the origin group for Amazon CloudFront.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-origin-failover-enabled.html
  - CLOUDFRONT_SNI_ENABLED
```
@Stability(value=Stable)
public static final String CLOUDFRONT_SNI_ENABLED
```
    Checks if Amazon CloudFront distributions are using a custom SSL certificate and are configured to use SNI to serve HTTPS requests.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-sni-enabled.html
  - CLOUDFRONT_VIEWER_POLICY_HTTPS
```
@Stability(value=Stable)
public static final String CLOUDFRONT_VIEWER_POLICY_HTTPS
```
    Checks whether your Amazon CloudFront distributions use HTTPS (directly or via a redirection).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-viewer-policy-https.html
  - CLOUDTRAIL_MULTI_REGION_ENABLED
```
@Stability(value=Stable)
public static final String CLOUDTRAIL_MULTI_REGION_ENABLED
```
    Checks that there is at least one multi-region AWS CloudTrail.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/multi-region-cloudtrail-enabled.html
  - CLOUDTRAIL_S3_DATAEVENTS_ENABLED
```
@Stability(value=Stable)
public static final String CLOUDTRAIL_S3_DATAEVENTS_ENABLED
```
    Checks whether at least one AWS CloudTrail trail is logging Amazon S3 data events for all S3 buckets.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-s3-dataevents-enabled.html
  - CLOUDTRAIL_SECURITY_TRAIL_ENABLED
```
@Stability(value=Stable)
public static final String CLOUDTRAIL_SECURITY_TRAIL_ENABLED
```
    Checks that there is at least one AWS CloudTrail trail defined with security best practices.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-security-trail-enabled.html
  - CLOUDWATCH_ALARM_ACTION_CHECK
```
@Stability(value=Stable)
public static final String CLOUDWATCH_ALARM_ACTION_CHECK
```
    Checks whether CloudWatch alarms have at least one alarm action, one INSUFFICIENT_DATA action, or one OK action enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-action-check.html
  - CLOUDWATCH_ALARM_RESOURCE_CHECK
```
@Stability(value=Stable)
public static final String CLOUDWATCH_ALARM_RESOURCE_CHECK
```
    Checks whether the specified resource type has a CloudWatch alarm for the specified metric.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-resource-check.html
  - CLOUDWATCH_ALARM_SETTINGS_CHECK
```
@Stability(value=Stable)
public static final String CLOUDWATCH_ALARM_SETTINGS_CHECK
```
    Checks whether CloudWatch alarms with the given metric name have the specified settings.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-settings-check.html
  - CLOUDWATCH_LOG_GROUP_ENCRYPTED
```
@Stability(value=Stable)
public static final String CLOUDWATCH_LOG_GROUP_ENCRYPTED
```
    Checks whether a log group in Amazon CloudWatch Logs is encrypted with a AWS Key Management Service (KMS) managed Customer Master Keys (CMK).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-log-group-encrypted.html
  - CMK_BACKING_KEY_ROTATION_ENABLED
```
@Stability(value=Stable)
public static final String CMK_BACKING_KEY_ROTATION_ENABLED
```
    Checks that key rotation is enabled for each key and matches to the key ID of the customer created customer master key (CMK).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cmk-backing-key-rotation-enabled.html
  - CODEBUILD_PROJECT_ENVVAR_AWSCRED_CHECK
```
@Stability(value=Stable)
public static final String CODEBUILD_PROJECT_ENVVAR_AWSCRED_CHECK
```
    Checks whether the project contains environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-envvar-awscred-check.html
  - CODEBUILD_PROJECT_SOURCE_REPO_URL_CHECK
```
@Stability(value=Stable)
public static final String CODEBUILD_PROJECT_SOURCE_REPO_URL_CHECK
```
    Checks whether the GitHub or Bitbucket source repository URL contains either personal access tokens or user name and password.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-source-repo-url-check.html
  - CODEPIPELINE_DEPLOYMENT_COUNT_CHECK
```
@Stability(value=Stable)
public static final String CODEPIPELINE_DEPLOYMENT_COUNT_CHECK
```
    Checks whether the first deployment stage of the AWS CodePipeline performs more than one deployment.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/codepipeline-deployment-count-check.html
  - CODEPIPELINE_REGION_FANOUT_CHECK
```
@Stability(value=Stable)
public static final String CODEPIPELINE_REGION_FANOUT_CHECK
```
    Checks whether each stage in the AWS CodePipeline deploys to more than N times the number of the regions the AWS CodePipeline has deployed in all the previous combined stages, where N is the region fanout number.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/codepipeline-region-fanout-check.html
  - CW_LOGGROUP_RETENTION_PERIOD_CHECK
```
@Stability(value=Stable)
public static final String CW_LOGGROUP_RETENTION_PERIOD_CHECK
```
    Checks whether Amazon CloudWatch LogGroup retention period is set to specific number of days.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/cw-loggroup-retention-period-check.html
  - DAX_ENCRYPTION_ENABLED
```
@Stability(value=Stable)
public static final String DAX_ENCRYPTION_ENABLED
```
    Checks that DynamoDB Accelerator (DAX) clusters are encrypted.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dax-encryption-enabled.html
  - DMS_REPLICATION_NOT_PUBLIC
```
@Stability(value=Stable)
public static final String DMS_REPLICATION_NOT_PUBLIC
```
    Checks whether AWS Database Migration Service replication instances are public.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dms-replication-not-public.html
  - DYNAMODB_AUTOSCALING_ENABLED
```
@Stability(value=Stable)
public static final String DYNAMODB_AUTOSCALING_ENABLED
```
    Checks whether Auto Scaling or On-Demand is enabled on your DynamoDB tables and/or global secondary indexes.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-autoscaling-enabled.html
  - DYNAMODB_IN_BACKUP_PLAN
```
@Stability(value=Stable)
public static final String DYNAMODB_IN_BACKUP_PLAN
```
    Checks whether Amazon DynamoDB table is present in AWS Backup plans.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-in-backup-plan.html
  - DYNAMODB_PITR_ENABLED
```
@Stability(value=Stable)
public static final String DYNAMODB_PITR_ENABLED
```
    Checks that point in time recovery (PITR) is enabled for Amazon DynamoDB tables.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-pitr-enabled.html
  - DYNAMODB_TABLE_ENCRYPTED_KMS
```
@Stability(value=Stable)
public static final String DYNAMODB_TABLE_ENCRYPTED_KMS
```
    Checks whether Amazon DynamoDB table is encrypted with AWS Key Management Service (KMS).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-table-encrypted-kms.html
  - DYNAMODB_TABLE_ENCRYPTION_ENABLED
```
@Stability(value=Stable)
public static final String DYNAMODB_TABLE_ENCRYPTION_ENABLED
```
    Checks whether the Amazon DynamoDB tables are encrypted and checks their status.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-table-encryption-enabled.html
  - DYNAMODB_THROUGHPUT_LIMIT_CHECK
```
@Stability(value=Stable)
public static final String DYNAMODB_THROUGHPUT_LIMIT_CHECK
```
    Checks whether provisioned DynamoDB throughput is approaching the maximum limit for your account.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-throughput-limit-check.html
  - EBS_ENCRYPTED_VOLUMES
```
@Stability(value=Stable)
public static final String EBS_ENCRYPTED_VOLUMES
```
    Checks whether the EBS volumes that are in an attached state are encrypted.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/encrypted-volumes.html
  - EBS_IN_BACKUP_PLAN
```
@Stability(value=Stable)
public static final String EBS_IN_BACKUP_PLAN
```
    Checks if Amazon Elastic Block Store (Amazon EBS) volumes are added in backup plans of AWS Backup.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ebs-in-backup-plan.html
  - EBS_OPTIMIZED_INSTANCE
```
@Stability(value=Stable)
public static final String EBS_OPTIMIZED_INSTANCE
```
    Checks whether EBS optimization is enabled for your EC2 instances that can be EBS-optimized.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ebs-optimized-instance.html
  - EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK
```
@Stability(value=Stable)
public static final String EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK
```
    Checks whether Amazon Elastic Block Store snapshots are not publicly restorable.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ebs-snapshot-public-restorable-check.html
  - EC2_DESIRED_INSTANCE_TENANCY
```
@Stability(value=Stable)
public static final String EC2_DESIRED_INSTANCE_TENANCY
```
    Checks instances for specified tenancy.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/desired-instance-tenancy.html
  - EC2_DESIRED_INSTANCE_TYPE
```
@Stability(value=Stable)
public static final String EC2_DESIRED_INSTANCE_TYPE
```
    Checks whether your EC2 instances are of the specified instance types.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/desired-instance-type.html
  - EC2_EBS_ENCRYPTION_BY_DEFAULT
```
@Stability(value=Stable)
public static final String EC2_EBS_ENCRYPTION_BY_DEFAULT
```
    Check that Amazon Elastic Block Store (EBS) encryption is enabled by default.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-ebs-encryption-by-default.html
  - EC2_IMDSV2_CHECK
```
@Stability(value=Stable)
public static final String EC2_IMDSV2_CHECK
```
    Checks whether your Amazon Elastic Compute Cloud (Amazon EC2) instance metadata version is configured with Instance Metadata Service Version 2 (IMDSv2).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-imdsv2-check.html
  - EC2_INSTANCE_DETAILED_MONITORING_ENABLED
```
@Stability(value=Stable)
public static final String EC2_INSTANCE_DETAILED_MONITORING_ENABLED
```
    Checks whether detailed monitoring is enabled for EC2 instances.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-detailed-monitoring-enabled.html
  - EC2_INSTANCE_MANAGED_BY_SSM
```
@Stability(value=Stable)
public static final String EC2_INSTANCE_MANAGED_BY_SSM
```
    Checks whether the Amazon EC2 instances in your account are managed by AWS Systems Manager.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-managed-by-systems-manager.html
  - EC2_INSTANCE_NO_PUBLIC_IP
```
@Stability(value=Stable)
public static final String EC2_INSTANCE_NO_PUBLIC_IP
```
    Checks whether Amazon Elastic Compute Cloud (Amazon EC2) instances have a public IP association.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-no-public-ip.html
  - EC2_INSTANCE_PROFILE_ATTACHED
```
@Stability(value=Stable)
public static final String EC2_INSTANCE_PROFILE_ATTACHED
```
    Checks if an Amazon Elastic Compute Cloud (Amazon EC2) instance has an Identity and Access Management (IAM) profile attached to it.
    This rule is NON_COMPLIANT if no IAM profile is attached to the Amazon EC2 instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-profile-attached.html
  - EC2_INSTANCES_IN_VPC
```
@Stability(value=Stable)
public static final String EC2_INSTANCES_IN_VPC
```
    Checks whether your EC2 instances belong to a virtual private cloud (VPC).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-instances-in-vpc.html
  - EC2_MANAGED_INSTANCE_APPLICATIONS_BLOCKED
```
@Stability(value=Stable)
public static final String EC2_MANAGED_INSTANCE_APPLICATIONS_BLOCKED
```
    Checks that none of the specified applications are installed on the instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-applications-blacklisted.html
  - EC2_MANAGED_INSTANCE_APPLICATIONS_REQUIRED
```
@Stability(value=Stable)
public static final String EC2_MANAGED_INSTANCE_APPLICATIONS_REQUIRED
```
    Checks whether all of the specified applications are installed on the instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-applications-required.html
  - EC2_MANAGED_INSTANCE_ASSOCIATION_COMPLIANCE_STATUS_CHECK
```
@Stability(value=Stable)
public static final String EC2_MANAGED_INSTANCE_ASSOCIATION_COMPLIANCE_STATUS_CHECK
```
    Checks whether the compliance status of AWS Systems Manager association compliance is COMPLIANT or NON_COMPLIANT after the association execution on the instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-association-compliance-status-check.html
  - EC2_MANAGED_INSTANCE_INVENTORY_BLOCKED
```
@Stability(value=Stable)
public static final String EC2_MANAGED_INSTANCE_INVENTORY_BLOCKED
```
    Checks whether instances managed by AWS Systems Manager are configured to collect blocked inventory types.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-inventory-blacklisted.html
  - EC2_MANAGED_INSTANCE_PATCH_COMPLIANCE_STATUS_CHECK
```
@Stability(value=Stable)
public static final String EC2_MANAGED_INSTANCE_PATCH_COMPLIANCE_STATUS_CHECK
```
    Checks whether the compliance status of the Amazon EC2 Systems Manager patch compliance is COMPLIANT or NON_COMPLIANT after the patch installation on the instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-patch-compliance-status-check.html
  - EC2_MANAGED_INSTANCE_PLATFORM_CHECK
```
@Stability(value=Stable)
public static final String EC2_MANAGED_INSTANCE_PLATFORM_CHECK
```
    Checks whether EC2 managed instances have the desired configurations.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-platform-check.html
  - EC2_SECURITY_GROUP_ATTACHED_TO_ENI
```
@Stability(value=Stable)
public static final String EC2_SECURITY_GROUP_ATTACHED_TO_ENI
```
    Checks that security groups are attached to Amazon Elastic Compute Cloud (Amazon EC2) instances or to an elastic network interface.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-security-group-attached-to-eni.html
  - EC2_SECURITY_GROUPS_INCOMING_SSH_DISABLED
```
@Stability(value=Stable)
public static final String EC2_SECURITY_GROUPS_INCOMING_SSH_DISABLED
```
    Checks whether the incoming SSH traffic for the security groups is accessible.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/restricted-ssh.html
  - EC2_SECURITY_GROUPS_RESTRICTED_INCOMING_TRAFFIC
```
@Stability(value=Stable)
public static final String EC2_SECURITY_GROUPS_RESTRICTED_INCOMING_TRAFFIC
```
    Checks whether the security groups in use do not allow unrestricted incoming TCP traffic to the specified ports.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/restricted-common-ports.html
  - EC2_STOPPED_INSTANCE
```
@Stability(value=Stable)
public static final String EC2_STOPPED_INSTANCE
```
    Checks whether there are instances stopped for more than the allowed number of days.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-stopped-instance.html
  - EC2_VOLUME_INUSE_CHECK
```
@Stability(value=Stable)
public static final String EC2_VOLUME_INUSE_CHECK
```
    Checks whether EBS volumes are attached to EC2 instances.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/ec2-volume-inuse-check.html
  - EFS_ENCRYPTED_CHECK
```
@Stability(value=Stable)
public static final String EFS_ENCRYPTED_CHECK
```
    hecks whether Amazon Elastic File System (Amazon EFS) is configured to encrypt the file data using AWS Key Management Service (AWS KMS).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/efs-encrypted-check.html
  - EFS_IN_BACKUP_PLAN
```
@Stability(value=Stable)
public static final String EFS_IN_BACKUP_PLAN
```
    Checks whether Amazon Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/efs-in-backup-plan.html
  - EIP_ATTACHED
```
@Stability(value=Stable)
public static final String EIP_ATTACHED
```
    Checks whether all Elastic IP addresses that are allocated to a VPC are attached to EC2 instances or in-use elastic network interfaces (ENIs).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/eip-attached.html
  - EKS_CLUSTER_OLDEST_SUPPORTED_VERSION
```
@Stability(value=Stable)
public static final String EKS_CLUSTER_OLDEST_SUPPORTED_VERSION
```
    Checks if an Amazon Elastic Kubernetes Service (EKS) cluster is running the oldest supported version.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-oldest-supported-version.html
  - EKS_CLUSTER_SUPPORTED_VERSION
```
@Stability(value=Stable)
public static final String EKS_CLUSTER_SUPPORTED_VERSION
```
    Checks if an Amazon Elastic Kubernetes Service (EKS) cluster is running a supported Kubernetes version.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-supported-version.html
  - EKS_ENDPOINT_NO_PUBLIC_ACCESS
```
@Stability(value=Stable)
public static final String EKS_ENDPOINT_NO_PUBLIC_ACCESS
```
    Checks whether Amazon Elastic Kubernetes Service (Amazon EKS) endpoint is not publicly accessible.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/eks-endpoint-no-public-access.html
  - EKS_SECRETS_ENCRYPTED
```
@Stability(value=Stable)
public static final String EKS_SECRETS_ENCRYPTED
```
    Checks whether Amazon Elastic Kubernetes Service clusters are configured to have Kubernetes secrets encrypted using AWS Key Management Service (KMS) keys.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/eks-secrets-encrypted.html
  - ELASTICACHE_REDIS_CLUSTER_AUTOMATIC_BACKUP_CHECK
```
@Stability(value=Stable)
public static final String ELASTICACHE_REDIS_CLUSTER_AUTOMATIC_BACKUP_CHECK
```
    Check if the Amazon ElastiCache Redis clusters have automatic backup turned on.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elasticache-redis-cluster-automatic-backup-check.html
  - ELASTICSEARCH_ENCRYPTED_AT_REST
```
@Stability(value=Stable)
public static final String ELASTICSEARCH_ENCRYPTED_AT_REST
```
    Checks whether Amazon Elasticsearch Service (Amazon ES) domains have encryption at rest configuration enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-encrypted-at-rest.html
  - ELASTICSEARCH_IN_VPC_ONLY
```
@Stability(value=Stable)
public static final String ELASTICSEARCH_IN_VPC_ONLY
```
    Checks whether Amazon Elasticsearch Service (Amazon ES) domains are in Amazon Virtual Private Cloud (Amazon VPC).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-in-vpc-only.html
  - ELASTICSEARCH_NODE_TO_NODE_ENCRYPTION_CHECK
```
@Stability(value=Stable)
public static final String ELASTICSEARCH_NODE_TO_NODE_ENCRYPTION_CHECK
```
    Check that Amazon ElasticSearch Service nodes are encrypted end to end.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-node-to-node-encryption-check.html
  - ELB_ACM_CERTIFICATE_REQUIRED
```
@Stability(value=Stable)
public static final String ELB_ACM_CERTIFICATE_REQUIRED
```
    Checks whether the Classic Load Balancers use SSL certificates provided by AWS Certificate Manager.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-acm-certificate-required.html
  - ELB_CROSS_ZONE_LOAD_BALANCING_ENABLED
```
@Stability(value=Stable)
public static final String ELB_CROSS_ZONE_LOAD_BALANCING_ENABLED
```
    Checks if cross-zone load balancing is enabled for the Classic Load Balancers (CLBs).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-cross-zone-load-balancing-enabled.html
  - ELB_CUSTOM_SECURITY_POLICY_SSL_CHECK
```
@Stability(value=Stable)
public static final String ELB_CUSTOM_SECURITY_POLICY_SSL_CHECK
```
    Checks whether your Classic Load Balancer SSL listeners are using a custom policy.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-custom-security-policy-ssl-check.html
  - ELB_DELETION_PROTECTION_ENABLED
```
@Stability(value=Stable)
public static final String ELB_DELETION_PROTECTION_ENABLED
```
    Checks whether Elastic Load Balancing has deletion protection enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-deletion-protection-enabled.html
  - ELB_LOGGING_ENABLED
```
@Stability(value=Stable)
public static final String ELB_LOGGING_ENABLED
```
    Checks whether the Application Load Balancer and the Classic Load Balancer have logging enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-logging-enabled.html
  - ELB_PREDEFINED_SECURITY_POLICY_SSL_CHECK
```
@Stability(value=Stable)
public static final String ELB_PREDEFINED_SECURITY_POLICY_SSL_CHECK
```
    Checks whether your Classic Load Balancer SSL listeners are using a predefined policy.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-predefined-security-policy-ssl-check.html
  - ELB_TLS_HTTPS_LISTENERS_ONLY
```
@Stability(value=Stable)
public static final String ELB_TLS_HTTPS_LISTENERS_ONLY
```
    Checks whether your Classic Load Balancer is configured with SSL or HTTPS listeners.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/elb-tls-https-listeners-only.html
  - EMR_KERBEROS_ENABLED
```
@Stability(value=Stable)
public static final String EMR_KERBEROS_ENABLED
```
    Checks that Amazon EMR clusters have Kerberos enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/emr-kerberos-enabled.html
  - EMR_MASTER_NO_PUBLIC_IP
```
@Stability(value=Stable)
public static final String EMR_MASTER_NO_PUBLIC_IP
```
    Checks whether Amazon Elastic MapReduce (EMR) clusters' master nodes have public IPs.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/emr-master-no-public-ip.html
  - FMS_SECURITY_GROUP_AUDIT_POLICY_CHECK
```
@Stability(value=Stable)
public static final String FMS_SECURITY_GROUP_AUDIT_POLICY_CHECK
```
    Checks whether the security groups associated inScope resources are compliant with the master security groups at each rule level based on allowSecurityGroup and denySecurityGroup flag.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/fms-security-group-audit-policy-check.html
  - FMS_SECURITY_GROUP_CONTENT_CHECK
```
@Stability(value=Stable)
public static final String FMS_SECURITY_GROUP_CONTENT_CHECK
```
    Checks whether AWS Firewall Manager created security groups content is the same as the master security groups.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/fms-security-group-content-check.html
  - FMS_SECURITY_GROUP_RESOURCE_ASSOCIATION_CHECK
```
@Stability(value=Stable)
public static final String FMS_SECURITY_GROUP_RESOURCE_ASSOCIATION_CHECK
```
    Checks whether Amazon EC2 or an elastic network interface is associated with AWS Firewall Manager security groups.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/fms-security-group-resource-association-check.html
  - FMS_SHIELD_RESOURCE_POLICY_CHECK
```
@Stability(value=Stable)
public static final String FMS_SHIELD_RESOURCE_POLICY_CHECK
```
    Checks whether an Application Load Balancer, Amazon CloudFront distributions, Elastic Load Balancer or Elastic IP has AWS Shield protection.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/fms-shield-resource-policy-check.html
  - FMS_WEBACL_RESOURCE_POLICY_CHECK
```
@Stability(value=Stable)
public static final String FMS_WEBACL_RESOURCE_POLICY_CHECK
```
    Checks whether the web ACL is associated with an Application Load Balancer, API Gateway stage, or Amazon CloudFront distributions.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/fms-webacl-resource-policy-check.html
  - FMS_WEBACL_RULEGROUP_ASSOCIATION_CHECK
```
@Stability(value=Stable)
public static final String FMS_WEBACL_RULEGROUP_ASSOCIATION_CHECK
```
    Checks that the rule groups associate with the web ACL at the correct priority.
    The correct priority is decided by the rank of the rule groups in the ruleGroups parameter.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/fms-webacl-rulegroup-association-check.html
  - GUARDDUTY_ENABLED_CENTRALIZED
```
@Stability(value=Stable)
public static final String GUARDDUTY_ENABLED_CENTRALIZED
```
    Checks whether Amazon GuardDuty is enabled in your AWS account and region.
    If you provide an AWS account for centralization, the rule evaluates the Amazon GuardDuty results in the centralized account.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/guardduty-enabled-centralized.html
  - GUARDDUTY_NON_ARCHIVED_FINDINGS
```
@Stability(value=Stable)
public static final String GUARDDUTY_NON_ARCHIVED_FINDINGS
```
    Checks whether the Amazon GuardDuty has findings that are non archived.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/guardduty-non-archived-findings.html
  - IAM_CUSTOMER_POLICY_BLOCKED_KMS_ACTIONS
```
@Stability(value=Stable)
public static final String IAM_CUSTOMER_POLICY_BLOCKED_KMS_ACTIONS
```
    Checks that the managed AWS Identity and Access Management policies that you create do not allow blocked actions on all AWS AWS KMS keys.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-customer-policy-blocked-kms-actions.html
  - IAM_GROUP_HAS_USERS_CHECK
```
@Stability(value=Stable)
public static final String IAM_GROUP_HAS_USERS_CHECK
```
    Checks whether IAM groups have at least one IAM user.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-group-has-users-check.html
  - IAM_INLINE_POLICY_BLOCKED_KMS_ACTIONS
```
@Stability(value=Stable)
public static final String IAM_INLINE_POLICY_BLOCKED_KMS_ACTIONS
```
    Checks that the inline policies attached to your AWS Identity and Access Management users, roles, and groups do not allow blocked actions on all AWS Key Management Service keys.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-inline-policy-blocked-kms-actions.html
  - IAM_NO_INLINE_POLICY_CHECK
```
@Stability(value=Stable)
public static final String IAM_NO_INLINE_POLICY_CHECK
```
    Checks that inline policy feature is not in use.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-no-inline-policy-check.html
  - IAM_PASSWORD_POLICY
```
@Stability(value=Stable)
public static final String IAM_PASSWORD_POLICY
```
    Checks whether the account password policy for IAM users meets the specified requirements indicated in the parameters.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-password-policy.html
  - IAM_POLICY_BLOCKED_CHECK
```
@Stability(value=Stable)
public static final String IAM_POLICY_BLOCKED_CHECK
```
    Checks whether for each IAM resource, a policy ARN in the input parameter is attached to the IAM resource.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-blacklisted-check.html
  - IAM_POLICY_IN_USE
```
@Stability(value=Stable)
public static final String IAM_POLICY_IN_USE
```
    Checks whether the IAM policy ARN is attached to an IAM user, or an IAM group with one or more IAM users, or an IAM role with one or more trusted entity.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-in-use.html
  - IAM_POLICY_NO_STATEMENTS_WITH_ADMIN_ACCESS
```
@Stability(value=Stable)
public static final String IAM_POLICY_NO_STATEMENTS_WITH_ADMIN_ACCESS
```
    Checks the IAM policies that you create for Allow statements that grant permissions to all actions on all resources.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-no-statements-with-admin-access.html
  - IAM_ROLE_MANAGED_POLICY_CHECK
```
@Stability(value=Stable)
public static final String IAM_ROLE_MANAGED_POLICY_CHECK
```
    Checks that AWS Identity and Access Management (IAM) policies in a list of policies are attached to all AWS roles.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-role-managed-policy-check.html
  - IAM_ROOT_ACCESS_KEY_CHECK
```
@Stability(value=Stable)
public static final String IAM_ROOT_ACCESS_KEY_CHECK
```
    Checks whether the root user access key is available.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-root-access-key-check.html
  - IAM_USER_GROUP_MEMBERSHIP_CHECK
```
@Stability(value=Stable)
public static final String IAM_USER_GROUP_MEMBERSHIP_CHECK
```
    Checks whether IAM users are members of at least one IAM group.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-user-group-membership-check.html
  - IAM_USER_MFA_ENABLED
```
@Stability(value=Stable)
public static final String IAM_USER_MFA_ENABLED
```
    Checks whether the AWS Identity and Access Management users have multi-factor authentication (MFA) enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-user-mfa-enabled.html
  - IAM_USER_NO_POLICIES_CHECK
```
@Stability(value=Stable)
public static final String IAM_USER_NO_POLICIES_CHECK
```
    Checks that none of your IAM users have policies attached.
    IAM users must inherit permissions from IAM groups or roles.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-user-no-policies-check.html
  - IAM_USER_UNUSED_CREDENTIALS_CHECK
```
@Stability(value=Stable)
public static final String IAM_USER_UNUSED_CREDENTIALS_CHECK
```
    Checks whether your AWS Identity and Access Management (IAM) users have passwords or active access keys that have not been used within the specified number of days you provided.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/iam-user-unused-credentials-check.html
  - INTERNET_GATEWAY_AUTHORIZED_VPC_ONLY
```
@Stability(value=Stable)
public static final String INTERNET_GATEWAY_AUTHORIZED_VPC_ONLY
```
    Checks that Internet gateways (IGWs) are only attached to an authorized Amazon Virtual Private Cloud (VPCs).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/internet-gateway-authorized-vpc-only.html
  - KMS_CMK_NOT_SCHEDULED_FOR_DELETION
```
@Stability(value=Stable)
public static final String KMS_CMK_NOT_SCHEDULED_FOR_DELETION
```
    Checks whether customer master keys (CMKs) are not scheduled for deletion in AWS Key Management Service (KMS).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/kms-cmk-not-scheduled-for-deletion.html
  - LAMBDA_CONCURRENCY_CHECK
```
@Stability(value=Stable)
public static final String LAMBDA_CONCURRENCY_CHECK
```
    Checks whether the AWS Lambda function is configured with function-level concurrent execution limit.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/lambda-concurrency-check.html
  - LAMBDA_DLQ_CHECK
```
@Stability(value=Stable)
public static final String LAMBDA_DLQ_CHECK
```
    Checks whether an AWS Lambda function is configured with a dead-letter queue.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/lambda-dlq-check.html
  - LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED
```
@Stability(value=Stable)
public static final String LAMBDA_FUNCTION_PUBLIC_ACCESS_PROHIBITED
```
    Checks whether the AWS Lambda function policy attached to the Lambda resource prohibits public access.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-public-access-prohibited.html
  - LAMBDA_FUNCTION_SETTINGS_CHECK
```
@Stability(value=Stable)
public static final String LAMBDA_FUNCTION_SETTINGS_CHECK
```
    Checks that the lambda function settings for runtime, role, timeout, and memory size match the expected values.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-settings-check.html
  - LAMBDA_INSIDE_VPC
```
@Stability(value=Stable)
public static final String LAMBDA_INSIDE_VPC
```
    Checks whether an AWS Lambda function is in an Amazon Virtual Private Cloud.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/lambda-inside-vpc.html
  - MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS
```
@Stability(value=Stable)
public static final String MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS
```
    Checks whether AWS Multi-Factor Authentication (MFA) is enabled for all IAM users that use a console password.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/mfa-enabled-for-iam-console-access.html
  - RDS_CLUSTER_DELETION_PROTECTION_ENABLED
```
@Stability(value=Stable)
public static final String RDS_CLUSTER_DELETION_PROTECTION_ENABLED
```
    Checks if an Amazon Relational Database Service (Amazon RDS) cluster has deletion protection enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-cluster-deletion-protection-enabled.html
  - RDS_DB_INSTANCE_BACKUP_ENABLED
```
@Stability(value=Stable)
public static final String RDS_DB_INSTANCE_BACKUP_ENABLED
```
    Checks whether RDS DB instances have backups enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/db-instance-backup-enabled.html
  - RDS_ENHANCED_MONITORING_ENABLED
```
@Stability(value=Stable)
public static final String RDS_ENHANCED_MONITORING_ENABLED
```
    Checks whether enhanced monitoring is enabled for Amazon Relational Database Service (Amazon RDS) instances.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-enhanced-monitoring-enabled.html
  - RDS_IN_BACKUP_PLAN
```
@Stability(value=Stable)
public static final String RDS_IN_BACKUP_PLAN
```
    Checks whether Amazon RDS database is present in back plans of AWS Backup.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-in-backup-plan.html
  - RDS_INSTANCE_DELETION_PROTECTION_ENABLED
```
@Stability(value=Stable)
public static final String RDS_INSTANCE_DELETION_PROTECTION_ENABLED
```
    Checks if an Amazon Relational Database Service (Amazon RDS) instance has deletion protection enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-deletion-protection-enabled.html
  - RDS_INSTANCE_IAM_AUTHENTICATION_ENABLED
```
@Stability(value=Stable)
public static final String RDS_INSTANCE_IAM_AUTHENTICATION_ENABLED
```
    Checks if an Amazon RDS instance has AWS Identity and Access Management (IAM) authentication enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-iam-authentication-enabled.html
  - RDS_INSTANCE_PUBLIC_ACCESS_CHECK
```
@Stability(value=Stable)
public static final String RDS_INSTANCE_PUBLIC_ACCESS_CHECK
```
    Check whether the Amazon Relational Database Service instances are not publicly accessible.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-public-access-check.html
  - RDS_LOGGING_ENABLED
```
@Stability(value=Stable)
public static final String RDS_LOGGING_ENABLED
```
    Checks that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-logging-enabled.html
  - RDS_MULTI_AZ_SUPPORT
```
@Stability(value=Stable)
public static final String RDS_MULTI_AZ_SUPPORT
```
    Checks whether high availability is enabled for your RDS DB instances.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-multi-az-support.html
  - RDS_SNAPSHOT_ENCRYPTED
```
@Stability(value=Stable)
public static final String RDS_SNAPSHOT_ENCRYPTED
```
    Checks whether Amazon Relational Database Service (Amazon RDS) DB snapshots are encrypted.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-snapshot-encrypted.html
  - RDS_SNAPSHOTS_PUBLIC_PROHIBITED
```
@Stability(value=Stable)
public static final String RDS_SNAPSHOTS_PUBLIC_PROHIBITED
```
    Checks if Amazon Relational Database Service (Amazon RDS) snapshots are public.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-snapshots-public-prohibited.html
  - RDS_STORAGE_ENCRYPTED
```
@Stability(value=Stable)
public static final String RDS_STORAGE_ENCRYPTED
```
    Checks whether storage encryption is enabled for your RDS DB instances.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/rds-storage-encrypted.html
  - REDSHIFT_BACKUP_ENABLED
```
@Stability(value=Stable)
public static final String REDSHIFT_BACKUP_ENABLED
```
    Checks that Amazon Redshift automated snapshots are enabled for clusters.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/redshift-backup-enabled.html
  - REDSHIFT_CLUSTER_CONFIGURATION_CHECK
```
@Stability(value=Stable)
public static final String REDSHIFT_CLUSTER_CONFIGURATION_CHECK
```
    Checks whether Amazon Redshift clusters have the specified settings.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-configuration-check.html
  - REDSHIFT_CLUSTER_MAINTENANCE_SETTINGS_CHECK
```
@Stability(value=Stable)
public static final String REDSHIFT_CLUSTER_MAINTENANCE_SETTINGS_CHECK
```
    Checks whether Amazon Redshift clusters have the specified maintenance settings.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-maintenancesettings-check.html
  - REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK
```
@Stability(value=Stable)
public static final String REDSHIFT_CLUSTER_PUBLIC_ACCESS_CHECK
```
    Checks whether Amazon Redshift clusters are not publicly accessible.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-public-access-check.html
  - REDSHIFT_REQUIRE_TLS_SSL
```
@Stability(value=Stable)
public static final String REDSHIFT_REQUIRE_TLS_SSL
```
    Checks whether Amazon Redshift clusters require TLS/SSL encryption to connect to SQL clients.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/redshift-require-tls-ssl.html
  - REQUIRED_TAGS
```
@Stability(value=Stable)
public static final String REQUIRED_TAGS
```
    Checks whether your resources have the tags that you specify.
    For example, you can check whether your Amazon EC2 instances have the CostCenter tag.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/required-tags.html
  - ROOT_ACCOUNT_HARDWARE_MFA_ENABLED
```
@Stability(value=Stable)
public static final String ROOT_ACCOUNT_HARDWARE_MFA_ENABLED
```
    Checks whether your AWS account is enabled to use multi-factor authentication (MFA) hardware device to sign in with root credentials.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/root-account-hardware-mfa-enabled.html
  - ROOT_ACCOUNT_MFA_ENABLED
```
@Stability(value=Stable)
public static final String ROOT_ACCOUNT_MFA_ENABLED
```
    Checks whether users of your AWS account require a multi-factor authentication (MFA) device to sign in with root credentials.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/root-account-mfa-enabled.html
  - S3_ACCOUNT_LEVEL_PUBLIC_ACCESS_BLOCKS
```
@Stability(value=Stable)
public static final String S3_ACCOUNT_LEVEL_PUBLIC_ACCESS_BLOCKS
```
    Checks whether the required public access block settings are configured from account level.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-account-level-public-access-blocks.html
  - S3_BUCKET_BLOCKED_ACTIONS_PROHIBITED
```
@Stability(value=Stable)
public static final String S3_BUCKET_BLOCKED_ACTIONS_PROHIBITED
```
    Checks that the Amazon Simple Storage Service bucket policy does not allow blocked bucket-level and object-level actions on resources in the bucket for principals from other AWS accounts.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-blacklisted-actions-prohibited.html
  - S3_BUCKET_DEFAULT_LOCK_ENABLED
```
@Stability(value=Stable)
public static final String S3_BUCKET_DEFAULT_LOCK_ENABLED
```
    Checks whether Amazon Simple Storage Service (Amazon S3) bucket has lock enabled, by default.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-default-lock-enabled.html
  - S3_BUCKET_LEVEL_PUBLIC_ACCESS_PROHIBITED
```
@Stability(value=Stable)
public static final String S3_BUCKET_LEVEL_PUBLIC_ACCESS_PROHIBITED
```
    Checks if Amazon Simple Storage Service (Amazon S3) buckets are publicly accessible.
    This rule is NON_COMPLIANT if an Amazon S3 bucket is not listed in the excludedPublicBuckets parameter and bucket level settings are public.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-level-public-access-prohibited.html
  - S3_BUCKET_LOGGING_ENABLED
```
@Stability(value=Stable)
public static final String S3_BUCKET_LOGGING_ENABLED
```
    Checks whether logging is enabled for your S3 buckets.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-logging-enabled.html
  - S3_BUCKET_POLICY_GRANTEE_CHECK
```
@Stability(value=Stable)
public static final String S3_BUCKET_POLICY_GRANTEE_CHECK
```
    Checks that the access granted by the Amazon S3 bucket is restricted by any of the AWS principals, federated users, service principals, IP addresses, or VPCs that you provide.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-policy-grantee-check.html
  - S3_BUCKET_POLICY_NOT_MORE_PERMISSIVE
```
@Stability(value=Stable)
public static final String S3_BUCKET_POLICY_NOT_MORE_PERMISSIVE
```
    Verifies that your Amazon Simple Storage Service bucket policies do not allow other inter-account permissions than the control Amazon S3 bucket policy provided.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-policy-not-more-permissive.html
  - S3_BUCKET_PUBLIC_READ_PROHIBITED
```
@Stability(value=Stable)
public static final String S3_BUCKET_PUBLIC_READ_PROHIBITED
```
    Checks that your Amazon S3 buckets do not allow public read access.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-public-read-prohibited.html
  - S3_BUCKET_PUBLIC_WRITE_PROHIBITED
```
@Stability(value=Stable)
public static final String S3_BUCKET_PUBLIC_WRITE_PROHIBITED
```
    Checks that your Amazon S3 buckets do not allow public write access.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-public-write-prohibited.html
  - S3_BUCKET_REPLICATION_ENABLED
```
@Stability(value=Stable)
public static final String S3_BUCKET_REPLICATION_ENABLED
```
    Checks whether S3 buckets have cross-region replication enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-replication-enabled.html
  - S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED
```
@Stability(value=Stable)
public static final String S3_BUCKET_SERVER_SIDE_ENCRYPTION_ENABLED
```
    Checks that your Amazon S3 bucket either has Amazon S3 default encryption enabled or that the S3 bucket policy explicitly denies put-object requests without server side encryption that uses AES-256 or AWS Key Management Service.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-server-side-encryption-enabled.html
  - S3_BUCKET_SSL_REQUESTS_ONLY
```
@Stability(value=Stable)
public static final String S3_BUCKET_SSL_REQUESTS_ONLY
```
    Checks whether S3 buckets have policies that require requests to use Secure Socket Layer (SSL).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-ssl-requests-only.html
  - S3_BUCKET_VERSIONING_ENABLED
```
@Stability(value=Stable)
public static final String S3_BUCKET_VERSIONING_ENABLED
```
    Checks whether versioning is enabled for your S3 buckets.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-versioning-enabled.html
  - S3_DEFAULT_ENCRYPTION_KMS
```
@Stability(value=Stable)
public static final String S3_DEFAULT_ENCRYPTION_KMS
```
    Checks whether the Amazon Simple Storage Service (Amazon S3) buckets are encrypted with AWS Key Management Service (AWS KMS).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/s3-default-encryption-kms.html
  - SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED
```
@Stability(value=Stable)
public static final String SAGEMAKER_ENDPOINT_CONFIGURATION_KMS_KEY_CONFIGURED
```
    Checks whether AWS Key Management Service (KMS) key is configured for an Amazon SageMaker endpoint configuration.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-endpoint-configuration-kms-key-configured.html
  - SAGEMAKER_NOTEBOOK_INSTANCE_KMS_KEY_CONFIGURED
```
@Stability(value=Stable)
public static final String SAGEMAKER_NOTEBOOK_INSTANCE_KMS_KEY_CONFIGURED
```
    Check whether an AWS Key Management Service (KMS) key is configured for SageMaker notebook instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-kms-key-configured.html
  - SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS
```
@Stability(value=Stable)
public static final String SAGEMAKER_NOTEBOOK_NO_DIRECT_INTERNET_ACCESS
```
    Checks whether direct internet access is disabled for an Amazon SageMaker notebook instance.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-no-direct-internet-access.html
  - SECRETSMANAGER_ROTATION_ENABLED_CHECK
```
@Stability(value=Stable)
public static final String SECRETSMANAGER_ROTATION_ENABLED_CHECK
```
    Checks whether AWS Secrets Manager secret has rotation enabled.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-rotation-enabled-check.html
  - SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK
```
@Stability(value=Stable)
public static final String SECRETSMANAGER_SCHEDULED_ROTATION_SUCCESS_CHECK
```
    Checks whether AWS Secrets Manager secret rotation has rotated successfully as per the rotation schedule.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-scheduled-rotation-success-check.html
  - SECURITYHUB_ENABLED
```
@Stability(value=Stable)
public static final String SECURITYHUB_ENABLED
```
    Checks that AWS Security Hub is enabled for an AWS account.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/securityhub-enabled.html
  - SERVICE_VPC_ENDPOINT_ENABLED
```
@Stability(value=Stable)
public static final String SERVICE_VPC_ENDPOINT_ENABLED
```
    Checks whether Service Endpoint for the service provided in rule parameter is created for each Amazon VPC.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/service-vpc-endpoint-enabled.html
  - SHIELD_ADVANCED_ENABLED_AUTO_RENEW
```
@Stability(value=Stable)
public static final String SHIELD_ADVANCED_ENABLED_AUTO_RENEW
```
    Checks whether EBS volumes are attached to EC2 instances.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/shield-advanced-enabled-autorenew.html
  - SHIELD_DRT_ACCESS
```
@Stability(value=Stable)
public static final String SHIELD_DRT_ACCESS
```
    Verify that DDoS response team (DRT) can access AWS account.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/shield-drt-access.html
  - SNS_ENCRYPTED_KMS
```
@Stability(value=Stable)
public static final String SNS_ENCRYPTED_KMS
```
    Checks whether Amazon SNS topic is encrypted with AWS Key Management Service (AWS KMS).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/sns-encrypted-kms.html
  - VPC_DEFAULT_SECURITY_GROUP_CLOSED
```
@Stability(value=Stable)
public static final String VPC_DEFAULT_SECURITY_GROUP_CLOSED
```
    Checks that the default security group of any Amazon Virtual Private Cloud (VPC) does not allow inbound or outbound traffic.
    The rule returns NOT_APPLICABLE if the security group is not default.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/vpc-default-security-group-closed.html
  - VPC_FLOW_LOGS_ENABLED
```
@Stability(value=Stable)
public static final String VPC_FLOW_LOGS_ENABLED
```
    Checks whether Amazon Virtual Private Cloud flow logs are found and enabled for Amazon VPC.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/vpc-flow-logs-enabled.html
  - VPC_SG_OPEN_ONLY_TO_AUTHORIZED_PORTS
```
@Stability(value=Stable)
public static final String VPC_SG_OPEN_ONLY_TO_AUTHORIZED_PORTS
```
    Checks whether the security group with 0.0.0.0/0 of any Amazon Virtual Private Cloud (Amazon VPC) allows only specific inbound TCP or UDP traffic.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/vpc-sg-open-only-to-authorized-ports.html
  - VPC_VPN_2_TUNNELS_UP
```
@Stability(value=Stable)
public static final String VPC_VPN_2_TUNNELS_UP
```
    Checks that both AWS Virtual Private Network tunnels provided by AWS Site-to-Site VPN are in UP status.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/vpc-vpn-2-tunnels-up.html
  - WAF_CLASSIC_LOGGING_ENABLED
```
@Stability(value=Stable)
public static final String WAF_CLASSIC_LOGGING_ENABLED
```
    Checks if logging is enabled on AWS Web Application Firewall (WAF) classic global web ACLs.
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/waf-classic-logging-enabled.html
  - WAFV2_LOGGING_ENABLED
```
@Stability(value=Stable)
public static final String WAFV2_LOGGING_ENABLED
```
    Checks whether logging is enabled on AWS Web Application Firewall (WAFV2) regional and global web access control list (ACLs).
    
    See Also:
    
    https://docs.aws.amazon.com/config/latest/developerguide/wafv2-logging-enabled.html
- Constructor Detail
  - ManagedRuleIdentifiers
```
protected ManagedRuleIdentifiers(software.amazon.jsii.JsiiObjectRef objRef)
```
  - ManagedRuleIdentifiers
```
protected ManagedRuleIdentifiers(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
```

Class ManagedRuleIdentifiers

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

Field Summary

Constructor Summary

Method Summary

Methods inherited from class software.amazon.jsii.JsiiObject

Methods inherited from class java.lang.Object

Methods inherited from interface software.amazon.jsii.JsiiSerializable

Field Detail

ACCESS_KEYS_ROTATED

ACCOUNT_PART_OF_ORGANIZATIONS

ACM_CERTIFICATE_EXPIRATION_CHECK

ALB_HTTP_DROP_INVALID_HEADER_ENABLED

ALB_HTTP_TO_HTTPS_REDIRECTION_CHECK

ALB_WAF_ENABLED

API_GW_CACHE_ENABLED_AND_ENCRYPTED

API_GW_ENDPOINT_TYPE_CHECK

API_GW_EXECUTION_LOGGING_ENABLED

APPROVED_AMIS_BY_ID

APPROVED_AMIS_BY_TAG

AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED

CLOUD_TRAIL_CLOUD_WATCH_LOGS_ENABLED

CLOUD_TRAIL_ENABLED

CLOUD_TRAIL_ENCRYPTION_ENABLED

CLOUD_TRAIL_LOG_FILE_VALIDATION_ENABLED

CLOUDFORMATION_STACK_DRIFT_DETECTION_CHECK

CLOUDFORMATION_STACK_NOTIFICATION_CHECK

CLOUDFRONT_DEFAULT_ROOT_OBJECT_CONFIGURED

CLOUDFRONT_ORIGIN_ACCESS_IDENTITY_ENABLED

CLOUDFRONT_ORIGIN_FAILOVER_ENABLED

CLOUDFRONT_SNI_ENABLED

CLOUDFRONT_VIEWER_POLICY_HTTPS

CLOUDTRAIL_MULTI_REGION_ENABLED

CLOUDTRAIL_S3_DATAEVENTS_ENABLED

CLOUDTRAIL_SECURITY_TRAIL_ENABLED

CLOUDWATCH_ALARM_ACTION_CHECK

CLOUDWATCH_ALARM_RESOURCE_CHECK

CLOUDWATCH_ALARM_SETTINGS_CHECK

CLOUDWATCH_LOG_GROUP_ENCRYPTED

CMK_BACKING_KEY_ROTATION_ENABLED

CODEBUILD_PROJECT_ENVVAR_AWSCRED_CHECK

CODEBUILD_PROJECT_SOURCE_REPO_URL_CHECK

CODEPIPELINE_DEPLOYMENT_COUNT_CHECK

CODEPIPELINE_REGION_FANOUT_CHECK

CW_LOGGROUP_RETENTION_PERIOD_CHECK

DAX_ENCRYPTION_ENABLED

DMS_REPLICATION_NOT_PUBLIC

DYNAMODB_AUTOSCALING_ENABLED

DYNAMODB_IN_BACKUP_PLAN

DYNAMODB_PITR_ENABLED

DYNAMODB_TABLE_ENCRYPTED_KMS

DYNAMODB_TABLE_ENCRYPTION_ENABLED

DYNAMODB_THROUGHPUT_LIMIT_CHECK

EBS_ENCRYPTED_VOLUMES

EBS_IN_BACKUP_PLAN

EBS_OPTIMIZED_INSTANCE

EBS_SNAPSHOT_PUBLIC_RESTORABLE_CHECK

EC2_DESIRED_INSTANCE_TENANCY

EC2_DESIRED_INSTANCE_TYPE

EC2_EBS_ENCRYPTION_BY_DEFAULT

EC2_IMDSV2_CHECK

EC2_INSTANCE_DETAILED_MONITORING_ENABLED

EC2_INSTANCE_MANAGED_BY_SSM

EC2_INSTANCE_NO_PUBLIC_IP

EC2_INSTANCE_PROFILE_ATTACHED

EC2_INSTANCES_IN_VPC

EC2_MANAGED_INSTANCE_APPLICATIONS_BLOCKED

EC2_MANAGED_INSTANCE_APPLICATIONS_REQUIRED

EC2_MANAGED_INSTANCE_ASSOCIATION_COMPLIANCE_STATUS_CHECK

EC2_MANAGED_INSTANCE_INVENTORY_BLOCKED

EC2_MANAGED_INSTANCE_PATCH_COMPLIANCE_STATUS_CHECK

EC2_MANAGED_INSTANCE_PLATFORM_CHECK

EC2_SECURITY_GROUP_ATTACHED_TO_ENI

EC2_SECURITY_GROUPS_INCOMING_SSH_DISABLED

EC2_SECURITY_GROUPS_RESTRICTED_INCOMING_TRAFFIC

EC2_STOPPED_INSTANCE

EC2_VOLUME_INUSE_CHECK

EFS_ENCRYPTED_CHECK

EFS_IN_BACKUP_PLAN