s3-access-point-in-vpc-only
Checks if an Amazon S3 access point does not allow access from the internet (NetworkOrigin is VPC). The rule is NON_COMPLIANT if NetworkOrigin is Internet.
Identifier: S3_ACCESS_POINT_IN_VPC_ONLY
Resource Types: AWS::S3::AccessPoint
Trigger type: Configuration changes
AWS Region: All supported AWS regions except US ISO West (Northern California), US ISO East, Asia Pacific (Malaysia), US ISOB East (Ohio), Canada West (Calgary) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.