Sent Notification when EBS volume snapshot permission changed to public

0

Hi Team,

Could you please help me to send an alert when EBS volume snapshot permission changed to public. We don't want others to create volume from the snapshot.

posta un anno fa244 visualizzazioni
1 Risposta
3

You can use AWS Config to detect non-compliant and notify via Amazon SNS. Using "ebs-snapshot-public-restorable-check" managed rules seems to fit your purpose.

ebs-snapshot-public-restorable-check - AWS Config

Here is an example of a security group.

Receive notifications for a non-compliant AWS resource using AWS Config

profile picture
con risposta un anno fa
profile pictureAWS
ESPERTO
kentrad
verificato un anno fa
  • Thanks @jhashimoto and kentrad for quick answer

  • @All with below configuration for existing non-complaint resources not getting alert. But if the new resource is created and it's compliance changed to not-compliance then only receiving the alert. Is there a way to get alert for exiting non-complaint resources under config rule

    Receive notifications for a non-compliant AWS resource using AWS Config

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande