ec2-vpn-connection-logging-enabled
Checks if AWS Site-to-Site VPN connections have Amazon CloudWatch logging enabled for both tunnels. The rule is NON_COMPLIANT if a Site-to-Site VPN connection does not have CloudWatch logging enabled for either or both tunnels.
Identifier: EC2_VPN_CONNECTION_LOGGING_ENABLED
Resource Types: AWS::EC2::VPNConnection
Trigger type: Configuration changes
AWS Region: All supported AWS regions except US ISO West, China (Beijing), US ISO East, Asia Pacific (Malaysia), US ISOB East, US West (Oregon), Canada West (Calgary), China (Ningxia) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
