s3-event-notifications-enabled
Checks if Amazon S3 Events Notifications are enabled on an S3 bucket. The rule is NON_COMPLIANT if S3 Events Notifications are not set on a bucket, or if the event type or destination do not match the eventTypes
and destinationArn parameters.
Identifier: S3_EVENT_NOTIFICATIONS_ENABLED
Resource Types: AWS::S3::Bucket
Trigger type: Configuration changes
AWS Region: All supported AWS regions except US ISO West, Asia Pacific (Jakarta), US ISO East, Asia Pacific (Malaysia), US ISOB East, Canada West (Calgary) Region
Parameters:
- destinationArn (Optional)
- Type: String
-
The Amazon Resource Name (ARN) of the destination for the event notification (Amazon SNS topic, AWS Lambda, Amazon SQS Queue).
- eventTypes (Optional)
- Type: CSV
-
Comma-separated list of the preferred Amazon S3 event types
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.