s3-access-point-in-vpc-only - AWS Config

s3-access-point-in-vpc-only

Checks if an Amazon S3 access point does not allow access from the internet (NetworkOrigin is VPC). The rule is NON_COMPLIANT if NetworkOrigin is Internet.

Identifier: S3_ACCESS_POINT_IN_VPC_ONLY

Resource Types: AWS::S3::AccessPoint

Trigger type: Configuration changes

AWS Region: All supported AWS regions except US ISO West (Northern California), US ISO East, Asia Pacific (Malaysia), US ISOB East (Ohio), Canada West (Calgary) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.