Sent Notification when EBS volume snapshot permission changed to public

Question

Hi Team,

Could you please help me to send an alert when EBS volume snapshot permission changed to public.
We don't want others to create volume from the snapshot.

Answer

You can use AWS Config to detect non-compliant and notify via Amazon SNS. Using "ebs-snapshot-public-restorable-check" managed rules seems to fit your purpose.

[ebs-snapshot-public-restorable-check - AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/ebs-snapshot-public-restorable-check.html)

Here is an example of a security group.

[Receive notifications for a non-compliant AWS resource using AWS Config](https://aws.amazon.com/premiumsupport/knowledge-center/config-resource-non-compliant/?nc1=h_ls)

Sent Notification when EBS volume snapshot permission changed to public

相关内容