Sent Notification when EBS volume snapshot permission changed to public

0

Hi Team,

Could you please help me to send an alert when EBS volume snapshot permission changed to public. We don't want others to create volume from the snapshot.

gefragt vor einem Jahr243 Aufrufe
1 Antwort
3

You can use AWS Config to detect non-compliant and notify via Amazon SNS. Using "ebs-snapshot-public-restorable-check" managed rules seems to fit your purpose.

ebs-snapshot-public-restorable-check - AWS Config

Here is an example of a security group.

Receive notifications for a non-compliant AWS resource using AWS Config

profile picture
beantwortet vor einem Jahr
profile pictureAWS
EXPERTE
kentrad
überprüft vor einem Jahr
  • Thanks @jhashimoto and kentrad for quick answer

  • @All with below configuration for existing non-complaint resources not getting alert. But if the new resource is created and it's compliance changed to not-compliance then only receiving the alert. Is there a way to get alert for exiting non-complaint resources under config rule

    Receive notifications for a non-compliant AWS resource using AWS Config

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen