s3-event-notifications-enabled - AWS Config

s3-event-notifications-enabled

Checks if Amazon S3 Events Notifications are enabled on an S3 bucket. The rule is NON_COMPLIANT if S3 Events Notifications are not set on a bucket, or if the event type or destination do not match the eventTypes and destinationArn parameters.

Identifier: S3_EVENT_NOTIFICATIONS_ENABLED

Resource Types: AWS::S3::Bucket

Trigger type: Configuration changes

AWS Region: All supported AWS regions except US ISO West, Asia Pacific (Jakarta), US ISO East, Asia Pacific (Malaysia), US ISOB East, Canada West (Calgary) Region

Parameters:

destinationArn (Optional)
Type: String

The Amazon Resource Name (ARN) of the destination for the event notification (Amazon SNS topic, AWS Lambda, Amazon SQS Queue).

eventTypes (Optional)
Type: CSV

Comma-separated list of the preferred Amazon S3 event types

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.