Sent Notification when EBS volume snapshot permission changed to public

0

Hi Team,

Could you please help me to send an alert when EBS volume snapshot permission changed to public. We don't want others to create volume from the snapshot.

preguntada hace un año244 visualizaciones
1 Respuesta
3

You can use AWS Config to detect non-compliant and notify via Amazon SNS. Using "ebs-snapshot-public-restorable-check" managed rules seems to fit your purpose.

ebs-snapshot-public-restorable-check - AWS Config

Here is an example of a security group.

Receive notifications for a non-compliant AWS resource using AWS Config

profile picture
respondido hace un año
profile pictureAWS
EXPERTO
kentrad
revisado hace un año
  • Thanks @jhashimoto and kentrad for quick answer

  • @All with below configuration for existing non-complaint resources not getting alert. But if the new resource is created and it's compliance changed to not-compliance then only receiving the alert. Is there a way to get alert for exiting non-complaint resources under config rule

    Receive notifications for a non-compliant AWS resource using AWS Config

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas