Checks if a recovery point was created for Amazon Elastic Compute Cloud (Amazon EC2) instances. The rule is NON_COMPLIANT if the Amazon EC2 instance does not have a corresponding recovery point created within the specified time period.
Identifier: EC2_LAST_BACKUP_RECOVERY_POINT_CREATED
Resource Types: AWS::EC2::Instance
Trigger type: Periodic
AWS Region: All supported AWS regions except China (Beijing), Asia Pacific (Thailand), Asia Pacific (Jakarta), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), Asia Pacific (Melbourne), Mexico (Central), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), China (Ningxia), Europe (Zurich) Region
Parameters:
- resourceTags (Optional)
- Type: String
-
Tags of Amazon EC2 instances for the rule to check, in JSON format
{"tagkey" : "tagValue"}
. - resourceId (Optional)
- Type: String
-
ID of Amazon EC2 instance for the rule to check.
- recoveryPointAgeValue (Optional)
- Type: int
- Default: 1
-
Numerical value for maximum allowed age. No more than 744 for hours, 31 for days.
- recoveryPointAgeUnit (Optional)
- Type: String
- Default: days
-
Unit of time for maximum allowed age. Accepted values: 'hours', 'days'.
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.