AWS Audit Manager不再開放給新客戶。現有客戶可以繼續正常使用該服務。如需詳細資訊，請參閱[AWS Audit Manager可用性變更](https://docs.aws.amazon.com/audit-manager/latest/userguide/audit-manager-availability-change.html)。

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# AWS Config 規則 支援 AWS Audit Manager
<a name="control-data-sources-config"></a>



您可以使用 Audit Manager 擷取 AWS Config 評估做為稽核的證據。當您建立或編輯自訂控制項時，您可以將一或多個 AWS Config 規則指定為證據收集的資料來源映射。 會根據這些規則 AWS Config 執行合規檢查，而 Audit Manager 會將結果報告為合規檢查證據。

除了受管規則之外，您還可以將自訂規則映射至控制項資料來源。

**Contents**
+ [重點](#aws-config-key-points)
+ [支援的 AWS Config 受管規則](#aws-config-managed-rules)
+ [搭配 Audit Manager 使用 AWS Config 自訂規則](#aws-config-custom-rules)
+ [其他資源](#aws-config-rules-troubleshoot)

## 重點
<a name="aws-config-key-points"></a>
+ Audit Manager 不會從[服務連結 AWS Config 規則](https://docs.aws.amazon.com/config/latest/developerguide/service-linked-awsconfig-rules.html)中收集證據，但來自一致性套件和來源的服務連結規則除外。 AWS Organizations
+ Audit Manager 不會為您管理 AWS Config 規則。開始收集證據之前，建議您檢閱目前的 AWS Config 規則參數。然後，根據所選架構的要求來驗證這些參數。如果需要，您可以[更新 AWS Config中的規則參數](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_manage-rules.html)，使其符合架構需求。這將有助於確保您的評估為該架構收集正確的合規檢查證據。

  例如，假設您正在為 CIS v1.2.0 建立評估。此架構具有名為[確保 IAM 密碼政策的控制項，其長度至少為 14 或更高](https://docs.aws.amazon.com/securityhub/latest/userguide/iam-controls.html#iam-15)。在 中 AWS Config，[iam-password-policy](https://docs.aws.amazon.com/config/latest/developerguide/iam-password-policy.html) 規則具有檢查密碼長度的`MinimumPasswordLength`參數。此參數的預設值為 14 字元。因此，該規則符合控制項的需求。如果您沒有使用預設參數值，請確保您使用的值等於或大於 CIS v1.2.0 的 14 個字元要求。您可以在 [AWS Config 文件](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html)中找到每個受管規則的預設參數詳細資訊。
+ 如果您需要驗證 AWS Config 規則是受管規則還是自訂規則，您可以使用 [AWS Config 主控台](https://console.aws.amazon.com/config/)執行此操作。從左側導覽功能表中選擇**規則**，然後在表格中尋找規則。如果是受管規則，**類型**欄會顯示**AWS 受管規則**。  
![受管規則，如 AWS Config 主控台所示。](http://docs.aws.amazon.com/zh_tw/audit-manager/latest/userguide/images/rules-managed-console.png)

## 支援的 AWS Config 受管規則
<a name="aws-config-managed-rules"></a>

Audit Manager 支援下列 AWS Config 受管規則。當您為自訂控制項設定資料來源時，您可以使用下列任何一個受管規則識別碼關鍵字。如需有關下列任何受管規則的詳細資訊，請從清單中選擇項目，或參閱*AWS Config 使用者指南*中的[AWS Config 受管規則](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html)。

**提示**  
當您在建立自訂控制項期間在 Audit Manager 主控台中選擇受管規則時，請確定您尋找下列其中一個規則識別碼關鍵字，而非規則名稱。如需規則名稱和規則識別碼之間的差異，以及如何尋找受管規則識別碼的詳細資訊，請參閱本使用手冊的[疑難排解](https://docs.aws.amazon.com/audit-manager/latest/userguide/control-issues.html#managed-rule-missing)一節。


| 支援的 AWS Config 受管規則關鍵字 | 
| --- | 
|  +  [ACCESS\_KEYS\_ROTATED](https://docs.aws.amazon.com/config/latest/developerguide/access-keys-rotated.html) <br />+  [ACCOUNT\_PART\_OF\_ORGANIZATIONS](https://docs.aws.amazon.com/config/latest/developerguide/account-part-of-organizations.html) <br />+  [ACM\_CERTIFICATE\_EXPIRATION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html) <br />+  [ACM\_CERTIFICATE\_RSA\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-rsa-check.html) <br />+  [ALB\_DESYNC\_MODE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/alb-desync-mode-check.html) <br />+  [ALB\_HTTP\_DROP\_INVALID\_HEADER\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/alb-http-drop-invalid-header-enabled.html) <br />+  [ALB\_HTTP\_TO\_HTTPS\_REDIRECTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/alb-http-to-https-redirection-check.html) <br />+  [ALB\_WAF\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/alb-waf-enabled.html) <br />+  [API\_GW\_ASSOCIATED\_WITH\_WAF](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-associated-with-waf.html) <br />+  [API\_GW\_CACHE\_ENABLED\_AND\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-cache-enabled-and-encrypted.html) <br />+  [API\_GW\_ENDPOINT\_TYPE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-endpoint-type-check.html) <br />+  [API\_GW\_EXECUTION\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-execution-logging-enabled.html) <br />+  [API\_GW\_SSL\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-ssl-enabled.html) <br />+  [API\_GW\_XRAY\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/api-gw-xray-enabled.html) <br />+  [API\_GWV2\_ACCESS\_LOGS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/api-gwv2-access-logs-enabled.html) <br />+  [API\_GWV2\_AUTHORIZATION\_TYPE\_CONFIGURED](https://docs.aws.amazon.com/config/latest/developerguide/api-gwv2-authorization-type-configured.html) <br />+  [APPROVED\_AMIS\_BY\_ID](https://docs.aws.amazon.com/config/latest/developerguide/approved-amis-by-id.html) <br />+  [APPROVED\_AMIS\_BY\_TAG](https://docs.aws.amazon.com/config/latest/developerguide/approved-amis-by-tag.html) <br />+  [APPSYNC\_ASSOCIATED\_WITH\_WAF](https://docs.aws.amazon.com/config/latest/developerguide/appsync-associated-with-waf.html) <br />+  [APPSYNC\_CACHE\_ENCRYPTION\_AT\_REST](https://docs.aws.amazon.com/config/latest/developerguide/appsync-cache-encryption-at-rest.html) <br />+  [APPSYNC\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/appsync-logging-enabled.html) <br />+  [AURORA\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/aurora-last-backup-recovery-point-created.html) <br />+  [AURORA\_MYSQL\_BACKTRACKING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/aurora-mysql-backtracking-enabled.html) <br />+  [AURORA\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/aurora-resources-protected-by-backup-plan.html) <br />+  [AUTOSCALING\_CAPACITY\_REBALANCING](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-capacity-rebalancing.html) <br />+  [AUTOSCALING\_GROUP\_ELB\_HEALTHCHECK\_REQUIRED](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-group-elb-healthcheck-required.html) <br />+  [AUTOSCALING\_LAUNCH\_CONFIG\_HOP\_LIMIT](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-launch-config-hop-limit.html) <br />+  [AUTOSCALING\_LAUNCH\_CONFIG\_PUBLIC\_IP\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-launch-config-public-ip-disabled.html) <br />+  [AUTOSCALING\_LAUNCHCONFIG\_REQUIRES\_IMDSV2](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-launchconfig-requires-imdsv2.html) <br />+  [AUTOSCALING\_LAUNCH\_TEMPLATE](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-launch-template.html) <br />+  [AUTOSCALING\_MULTIPLE\_AZ](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-multiple-az.html) <br />+  [AUTOSCALING\_MULTIPLE\_INSTANCE\_TYPES](https://docs.aws.amazon.com/config/latest/developerguide/autoscaling-multiple-instance-types.html) <br />+  [BACKUP\_PLAN\_MIN\_FREQUENCY\_AND\_MIN\_RETENTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/backup-plan-min-frequency-and-min-retention-check.html) <br />+  [BACKUP\_RECOVERY\_POINT\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/backup-recovery-point-encrypted.html) <br />+  [BACKUP\_RECOVERY\_POINT\_MANUAL\_DELETION\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/backup-recovery-point-manual-deletion-disabled.html) <br />+  [BACKUP\_RECOVERY\_POINT\_MINIMUM\_RETENTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/backup-recovery-point-minimum-retention-check.html) <br />+  [BEANSTALK\_ENHANCED\_HEALTH\_REPORTING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/beanstalk-enhanced-health-reporting-enabled.html) <br />+  [CLB\_DESYNC\_MODE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/clb-desync-mode-check.html) <br />+  [CLB\_MULTIPLE\_AZ](https://docs.aws.amazon.com/config/latest/developerguide/clb-multiple-az.html) <br />+  [CLOUD\_TRAIL\_CLOUD\_WATCH\_LOGS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-cloud-watch-logs-enabled.html) <br />+  [CLOUD\_TRAIL\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-enabled.html) <br />+  [CLOUD\_TRAIL\_ENCRYPTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-encryption-enabled.html) <br />+  [CLOUD\_TRAIL\_LOG\_FILE\_VALIDATION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-log-file-validation-enabled.html) <br />+  [CLOUDFORMATION\_STACK\_DRIFT\_DETECTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-drift-detection-check.html) <br />+  [CLOUDFORMATION\_STACK\_NOTIFICATION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudformation-stack-notification-check.html) <br />+  [CLOUDFRONT\_ACCESSLOGS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-accesslogs-enabled.html) <br />+  [CLOUDFRONT\_ASSOCIATED\_WITH\_WAF](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-associated-with-waf.html) <br />+  [CLOUDFRONT\_CUSTOM\_SSL\_CERTIFICATE](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-custom-ssl-certificate.html) <br />+  [CLOUDFRONT\_DEFAULT\_ROOT\_OBJECT\_CONFIGURED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-default-root-object-configured.html) <br />+  [CLOUDFRONT\_NO\_DEPRECATED\_SSL\_PROTOCOLS](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-no-deprecated-ssl-protocols.html) <br />+  [CLOUDFRONT\_ORIGIN\_ACCESS\_IDENTITY\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-origin-access-identity-enabled.html) <br />+  [CLOUDFRONT\_ORIGIN\_FAILOVER\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-origin-failover-enabled.html) <br />+  [CLOUDFRONT\_S3\_ORIGIN\_ACCESS\_CONTROL\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-s3-origin-access-control-enabled.html) <br />+  [CLOUDFRONT\_S3\_ORIGIN\_NON\_EXISTENT\_BUCKET](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-s3-origin-non-existent-bucket.html) <br />+  [CLOUDFRONT\_SECURITY\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-security-policy-check.html) <br />+  [CLOUDFRONT\_SNI\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-sni-enabled.html) <br />+  [CLOUDFRONT\_TRAFFIC\_TO\_ORIGIN\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-traffic-to-origin-encrypted.html) <br />+  [CLOUDFRONT\_VIEWER\_POLICY\_HTTPS](https://docs.aws.amazon.com/config/latest/developerguide/cloudfront-viewer-policy-https.html) <br />+  [CLOUDTRAIL\_S3\_DATAEVENTS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-s3-dataevents-enabled.html) <br />+  [CLOUDTRAIL\_SECURITY\_TRAIL\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cloudtrail-security-trail-enabled.html) <br />+  [CLOUDWATCH\_ALARM\_ACTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-action-check.html) <br />+  [CLOUDWATCH\_ALARM\_ACTION\_ENABLED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-action-enabled-check.html) <br />+  [CLOUDWATCH\_ALARM\_RESOURCE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-resource-check.html) <br />+  [CLOUDWATCH\_ALARM\_SETTINGS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-alarm-settings-check.html) <br />+  [CLOUDWATCH\_LOG\_GROUP\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/cloudwatch-log-group-encrypted.html) <br />+  [CMK\_BACKING\_KEY\_ROTATION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/cmk-backing-key-rotation-enabled.html) <br />+  [CODEBUILD\_PROJECT\_ARTIFACT\_ENCRYPTION](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-artifact-encryption.html) <br />+  [CODEBUILD\_PROJECT\_ENVIRONMENT\_PRIVILEGED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-environment-privileged-check.html) <br />+  [CODEBUILD\_PROJECT\_ENVVAR\_AWSCRED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-envvar-awscred-check.html) <br />+  [CODEBUILD\_PROJECT\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-logging-enabled.html) <br />+  [CODEBUILD\_PROJECT\_S3\_LOGS\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-s3-logs-encrypted.html) <br />+  [CODEBUILD\_PROJECT\_SOURCE\_REPO\_URL\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/codebuild-project-source-repo-url-check.html) <br />+  [CODEDEPLOY\_AUTO\_ROLLBACK\_MONITOR\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/codedeploy-auto-rollback-monitor-enabled.html) <br />+  [CODEDEPLOY\_EC2\_MINIMUM\_HEALTHY\_HOSTS\_CONFIGURED](https://docs.aws.amazon.com/config/latest/developerguide/codedeploy-ec2-minimum-healthy-hosts-configured.html) <br />+  [CODEDEPLOY\_LAMBDA\_ALLATONCE\_TRAFFIC\_SHIFT\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/codedeploy-lambda-allatonce-traffic-shift-disabled.html) <br />+  [CODEPIPELINE\_DEPLOYMENT\_COUNT\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/codepipeline-deployment-count-check.html) <br />+  [CODEPIPELINE\_REGION\_FANOUT\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/codepipeline-region-fanout-check.html) <br />+  [CUSTOM\_SCHEMA\_REGISTRY\_POLICY\_ATTACHED](https://docs.aws.amazon.com/config/latest/developerguide/custom-schema-registry-policy-attached.html) <br />+  [CW\_LOGGROUP\_RETENTION\_PERIOD\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/cw-loggroup-retention-period-check.html) <br />+  [DAX\_ENCRYPTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/dax-encryption-enabled.html) <br />+  [DB\_INSTANCE\_BACKUP\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/db-instance-backup-enabled.html) <br />+  [DESIRED\_INSTANCE\_TENANCY](https://docs.aws.amazon.com/config/latest/developerguide/desired-instance-tenancy.html) <br />+  [DESIRED\_INSTANCE\_TYPE](https://docs.aws.amazon.com/config/latest/developerguide/desired-instance-type.html) <br />+  [DMS\_REPLICATION\_NOT\_PUBLIC](https://docs.aws.amazon.com/config/latest/developerguide/dms-replication-not-public.html) <br />+  [DYNAMODB\_AUTOSCALING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-autoscaling-enabled.html) <br />+  [DYNAMODB\_IN\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-in-backup-plan.html) <br />+  [DYNAMODB\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-last-backup-recovery-point-created.html) <br />+  [DYNAMODB\_PITR\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-pitr-enabled.html) <br />+  [DYNAMODB\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-resources-protected-by-backup-plan.html) <br />+  [DYNAMODB\_TABLE\_ENCRYPTED\_KMS](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-table-encrypted-kms.html) <br />+  [DYNAMODB\_TABLE\_ENCRYPTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-table-encryption-enabled.html)  <br />+  [DYNAMODB\_THROUGHPUT\_LIMIT\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/dynamodb-throughput-limit-check.html) <br />+  [EBS\_IN\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/ebs-in-backup-plan.html) <br />+  [EBS\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/ebs-last-backup-recovery-point-created.html) <br />+  [EBS\_OPTIMIZED\_INSTANCE](https://docs.aws.amazon.com/config/latest/developerguide/ebs-optimized-instance.html) <br />+  [EBS\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/ebs-resources-protected-by-backup-plan.html) <br />+  [EBS\_SNAPSHOT\_PUBLIC\_RESTORABLE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ebs-snapshot-public-restorable-check.html) <br />+  [EC2\_CLIENT\_VPN\_NOT\_AUTHORIZE\_ALL](https://docs.aws.amazon.com/config/latest/developerguide/ec2-client-vpn-not-authorize-all.html) <br />+  [識別碼：](https://docs.aws.amazon.com/config/latest/developerguide/ec2-ebs-encryption-by-default.html)EC2\_EBS\_ENCRYPTION\_BY\_DEFAULT <br />+  [EC2\_IMDSV2\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-imdsv2-check.html) <br />+  [EC2\_INSTANCE\_DETAILED\_MONITORING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-detailed-monitoring-enabled.html) <br />+  [EC2\_INSTANCE\_MANAGED\_BY\_SSM](https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-managed-by-systems-manager.html) <br />+  [EC2\_INSTANCE\_MULTIPLE\_ENI\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-multiple-eni-check.html) <br />+  [EC2\_INSTANCE\_NO\_PUBLIC\_IP](https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-no-public-ip.html) <br />+  [EC2\_INSTANCE\_PROFILE\_ATTACHED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-instance-profile-attached.html) <br />+  [EC2\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-last-backup-recovery-point-created.html) <br />+  [EC2\_LAUNCH\_TEMPLATE\_PUBLIC\_IP\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-launch-template-public-ip-disabled.html) <br />+  [EC2\_MANAGEDINSTANCE\_APPLICATIONS\_BLACKLISTED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-applications-blacklisted.html) <br />+  [EC2\_MANAGEDINSTANCE\_APPLICATIONS\_REQUIRED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-applications-required.html) <br />+  [EC2\_MANAGEDINSTANCE\_ASSOCIATION\_COMPLIANCE\_STATUS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-association-compliance-status-check.html) <br />+  [EC2\_MANAGEDINSTANCE\_INVENTORY\_BLACKLISTED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-inventory-blacklisted.html) <br />+  [EC2\_MANAGEDINSTANCE\_PATCH\_COMPLIANCE\_STATUS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-patch-compliance-status-check.html) <br />+  [EC2\_MANAGEDINSTANCE\_PLATFORM\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-managedinstance-platform-check.html) <br />+  [EC2\_NO\_AMAZON\_KEY\_PAIR](https://docs.aws.amazon.com/config/latest/developerguide/ec2-no-amazon-key-pair.html) <br />+  [EC2\_PARAVIRTUAL\_INSTANCE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-paravirtual-instance-check.html) <br />+  [EC2\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/ec2-resources-protected-by-backup-plan.html) <br />+  [EC2\_SECURITY\_GROUP\_ATTACHED\_TO\_ENI](https://docs.aws.amazon.com/config/latest/developerguide/ec2-security-group-attached-to-eni.html) <br />+  [EC2\_SECURITY\_GROUP\_ATTACHED\_TO\_ENI\_PERIODIC](https://docs.aws.amazon.com/config/latest/developerguide/ec2-security-group-attached-to-eni-periodic.html) <br />+  [EC2\_STOPPED\_INSTANCE](https://docs.aws.amazon.com/config/latest/developerguide/ec2-stopped-instance.html) <br />+  [EC2\_TOKEN\_HOP\_LIMIT\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-token-hop-limit-check.html) <br />+  [EC2\_TRANSIT\_GATEWAY\_AUTO\_VPC\_ATTACH\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/ec2-transit-gateway-auto-vpc-attach-disabled.html) <br />+  [EC2\_VOLUME\_INUSE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ec2-volume-inuse-check.html) <br />+  [ECR\_PRIVATE\_IMAGE\_SCANNING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/ecr-private-image-scanning-enabled.html) <br />+  [ECR\_PRIVATE\_LIFECYCLE\_POLICY\_CONFIGURED](https://docs.aws.amazon.com/config/latest/developerguide/ecr-private-lifecycle-policy-configured.html) <br />+  [ECR\_PRIVATE\_TAG\_IMMUTABILITY\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/ecr-private-tag-immutability-enabled.html) <br />+  [ECS\_AWSVPC\_NETWORKING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/ecs-awsvpc-networking-enabled.html) <br />+  [ECS\_CONTAINER\_INSIGHTS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/ecs-container-insights-enabled.html) <br />+  [ECS\_CONTAINERS\_NONPRIVILEGED](https://docs.aws.amazon.com/config/latest/developerguide/ecs-containers-nonprivileged.html) <br />+  [ECS\_CONTAINERS\_READONLY\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/ecs-containers-readonly-access.html) <br />+  [ECS\_FARGATE\_LATEST\_PLATFORM\_VERSION](https://docs.aws.amazon.com/config/latest/developerguide/ecs-fargate-latest-platform-version.html) <br />+  [ECS\_NO\_ENVIRONMENT\_SECRETS](https://docs.aws.amazon.com/config/latest/developerguide/ecs-no-environment-secrets.html) <br />+  [ECS\_TASK\_DEFINITION\_LOG\_CONFIGURATION](https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-log-configuration.html) <br />+  [ECS\_TASK\_DEFINITION\_MEMORY\_HARD\_LIMIT](https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-memory-hard-limit.html) <br />+  [ECS\_TASK\_DEFINITION\_NONROOT\_USER](https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-nonroot-user.html) <br />+  [ECS\_TASK\_DEFINITION\_PID\_MODE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-pid-mode-check.html) <br />+  [ECS\_TASK\_DEFINITION\_USER\_FOR\_HOST\_MODE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/ecs-task-definition-user-for-host-mode-check.html) <br />+  [EFS\_ACCESS\_POINT\_ENFORCE\_ROOT\_DIRECTORY](https://docs.aws.amazon.com/config/latest/developerguide/efs-access-point-enforce-root-directory.html) <br />+  [EFS\_ACCESS\_POINT\_ENFORCE\_USER\_IDENTITY](https://docs.aws.amazon.com/config/latest/developerguide/efs-access-point-enforce-user-identity.html) <br />+  [EFS\_ENCRYPTED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/efs-encrypted-check.html) <br />+  [EFS\_IN\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/efs-in-backup-plan.html) <br />+  [EFS\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/efs-last-backup-recovery-point-created.html) <br />+  [EFS\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/efs-resources-protected-by-backup-plan.html) <br />+  [EIP\_ATTACHED](https://docs.aws.amazon.com/config/latest/developerguide/eip-attached.html) <br />+  [EKS\_CLUSTER\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-logging-enabled.html) <br />+  [EKS\_CLUSTER\_OLDEST\_SUPPORTED\_VERSION](https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-oldest-supported-version.html) <br />+  [EKS\_CLUSTER\_SUPPORTED\_VERSION](https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-supported-version.html) <br />+  [EKS\_ENDPOINT\_NO\_PUBLIC\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/eks-endpoint-no-public-access.html) <br />+  [EKS\_SECRETS\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/eks-secrets-encrypted.html) <br />+  [ELASTIC\_BEANSTALK\_LOGS\_TO\_CLOUDWATCH](https://docs.aws.amazon.com/config/latest/developerguide/elastic-beanstalk-logs-to-cloudwatch.html) <br />+  [ELASTIC\_BEANSTALK\_MANAGED\_UPDATES\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elastic-beanstalk-managed-updates-enabled.html) <br />+  [ELASTICACHE\_AUTO\_MINOR\_VERSION\_UPGRADE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-auto-minor-version-upgrade-check.html) <br />+  [ELASTICACHE\_RBAC\_AUTH\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-rbac-auth-enabled.html) <br />+  [ELASTICACHE\_REDIS\_CLUSTER\_AUTOMATIC\_BACKUP\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-redis-cluster-automatic-backup-check.html) <br />+  [ELASTICACHE\_REPL\_GRP\_AUTO\_FAILOVER\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-repl-grp-auto-failover-enabled.html) <br />+  [ELASTICACHE\_REPL\_GRP\_ENCRYPTED\_AT\_REST](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-repl-grp-encrypted-at-rest.html) <br />+  [ELASTICACHE\_REPL\_GRP\_ENCRYPTED\_IN\_TRANSIT](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-repl-grp-encrypted-in-transit.html) <br />+  [ELASTICACHE\_REPL\_GRP\_REDIS\_AUTH\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-repl-grp-redis-auth-enabled.html) <br />+  [ELASTICACHE\_SUBNET\_GROUP\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-subnet-group-check.html) <br />+  [ELASTICACHE\_SUPPORTED\_ENGINE\_VERSION](https://docs.aws.amazon.com/config/latest/developerguide/elasticache-supported-engine-version.html) <br />+  [ELASTICSEARCH\_ENCRYPTED\_AT\_REST](https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-encrypted-at-rest.html) <br />+  [ELASTICSEARCH\_IN\_VPC\_ONLY](https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-in-vpc-only.html) <br />+  [ELASTICSEARCH\_LOGS\_TO\_CLOUDWATCH](https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-logs-to-cloudwatch.html) <br />+  [ELASTICSEARCH\_NODE\_TO\_NODE\_ENCRYPTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-node-to-node-encryption-check.html) <br />+  [ELB\_ACM\_CERTIFICATE\_REQUIRED](https://docs.aws.amazon.com/config/latest/developerguide/elb-acm-certificate-required.html) <br />+  [ELB\_CROSS\_ZONE\_LOAD\_BALANCING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elb-cross-zone-load-balancing-enabled.html) <br />+  [ELB\_CUSTOM\_SECURITY\_POLICY\_SSL\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/elb-custom-security-policy-ssl-check.html) <br />+  [ELB\_DELETION\_PROTECTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elb-deletion-protection-enabled.html) <br />+  [ELB\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/elb-logging-enabled.html) <br />+  [ELB\_PREDEFINED\_SECURITY\_POLICY\_SSL\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/elb-predefined-security-policy-ssl-check.html) <br />+  [ELB\_TLS\_HTTPS\_LISTENERS\_ONLY](https://docs.aws.amazon.com/config/latest/developerguide/elb-tls-https-listeners-only.html) <br />+  [ELBV2\_ACM\_CERTIFICATE\_REQUIRED](https://docs.aws.amazon.com/config/latest/developerguide/elbv2-acm-certificate-required.html) <br />+  [ELBV2\_MULTIPLE\_AZ](https://docs.aws.amazon.com/config/latest/developerguide/elbv2-multiple-az.html) <br />+  [EMR\_KERBEROS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/emr-kerberos-enabled.html) <br />+  [EMR\_MASTER\_NO\_PUBLIC\_IP](https://docs.aws.amazon.com/config/latest/developerguide/emr-master-no-public-ip.html) <br />+  [ENCRYPTED\_VOLUMES](https://docs.aws.amazon.com/config/latest/developerguide/encrypted-volumes.html) <br />+  [FMS\_SHIELD\_RESOURCE\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/fms-shield-resource-policy-check.html) <br />+  [FMS\_WEBACL\_RESOURCE\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/fms-webacl-resource-policy-check.html) <br />+  [FMS\_WEBACL\_RULEGROUP\_ASSOCIATION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/fms-webacl-rulegroup-association-check.html) <br />+  [FSX\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/fsx-last-backup-recovery-point-created.html) <br />+  [FSX\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/fsx-resources-protected-by-backup-plan.html) <br />+  [GUARDDUTY\_ENABLED\_CENTRALIZED](https://docs.aws.amazon.com/config/latest/developerguide/guardduty-enabled-centralized.html) <br />+  [GUARDDUTY\_NON\_ARCHIVED\_FINDINGS](https://docs.aws.amazon.com/config/latest/developerguide/guardduty-non-archived-findings.html) <br />+  [IAM\_CUSTOMER\_POLICY\_BLOCKED\_KMS\_ACTIONS](https://docs.aws.amazon.com/config/latest/developerguide/iam-inline-policy-blocked-kms-actions.html) <br />+  [IAM\_GROUP\_HAS\_USERS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-group-has-users-check.html) <br />+  [IAM\_INLINE\_POLICY\_BLOCKED\_KMS\_ACTIONS](https://docs.aws.amazon.com/config/latest/developerguide/iam-inline-policy-blocked-kms-actions.html) <br />+  [IAM\_NO\_INLINE\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-no-inline-policy-check.html) <br />+  [IAM\_PASSWORD\_POLICY](https://docs.aws.amazon.com/config/latest/developerguide/iam-password-policy.html) <br />+  [IAM\_POLICY\_BLACKLISTED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-blacklisted-check.html) <br />+  [IAM\_POLICY\_IN\_USE](https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-in-use.html) <br />+  [IAM\_POLICY\_NO\_STATEMENTS\_WITH\_ADMIN\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-no-statements-with-admin-access.html) <br />+  [IAM\_POLICY\_NO\_STATEMENTS\_WITH\_FULL\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/iam-policy-no-statements-with-full-access.html) <br />+  [IAM\_ROLE\_MANAGED\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-role-managed-policy-check.html) <br />+  [IAM\_ROOT\_ACCESS\_KEY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-root-access-key-check.html) <br />+  [IAM\_USER\_GROUP\_MEMBERSHIP\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-user-group-membership-check.html) <br />+  [IAM\_USER\_MFA\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/iam-user-mfa-enabled.html) <br />+  [IAM\_USER\_NO\_POLICIES\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-user-no-policies-check.html) <br />+  [IAM\_USER\_UNUSED\_CREDENTIALS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/iam-user-unused-credentials-check.html) <br />+  [INCOMING\_SSH\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/restricted-ssh.html) <br />+  [INSTANCES\_IN\_VPC](https://docs.aws.amazon.com/config/latest/developerguide/ec2-instances-in-vpc.html) <br />+  [KINESIS\_STREAM\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/kinesis-stream-encrypted.html) <br />+  [INTERNET\_GATEWAY\_AUTHORIZED\_VPC\_ONLY](https://docs.aws.amazon.com/config/latest/developerguide/internet-gateway-authorized-vpc-only.html) <br />+  [KMS\_CMK\_NOT\_SCHEDULED\_FOR\_DELETION](https://docs.aws.amazon.com/config/latest/developerguide/kms-cmk-not-scheduled-for-deletion.html) <br />+  [LAMBDA\_CONCURRENCY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/lambda-concurrency-check.html) <br />+  [LAMBDA\_DLQ\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/lambda-dlq-check.html) <br />+  [LAMBDA\_FUNCTION\_PUBLIC\_ACCESS\_PROHIBITED](https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-public-access-prohibited.html) <br />+  [LAMBDA\_FUNCTION\_SETTINGS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/lambda-function-settings-check.html) <br />+  [LAMBDA\_INSIDE\_VPC](https://docs.aws.amazon.com/config/latest/developerguide/lambda-inside-vpc.html) <br />+  [LAMBDA\_VPC\_MULTI\_AZ\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/lambda-vpc-multi-az-check.html) <br />+  [MACIE\_STATUS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/macie-status-check.html) <br />+  [MFA\_ENABLED\_FOR\_IAM\_CONSOLE\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/mfa-enabled-for-iam-console-access.html) <br />+  [MQ\_AUTOMATIC\_MINOR\_VERSION\_UPGRADE\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/mq-automatic-minor-version-upgrade-enabled.html) <br />+  [MQ\_CLOUDWATCH\_AUDIT\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/mq-cloudwatch-audit-logging-enabled.html) <br />+  [MQ\_NO\_PUBLIC\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/mq-no-public-access.html) <br />+  [MULTI\_REGION\_CLOUD\_TRAIL\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/multi-region-cloudtrail-enabled.html) <br />+  [NACL\_NO\_UNRESTRICTED\_SSH\_RDP](https://docs.aws.amazon.com/config/latest/developerguide/nacl-no-unrestricted-ssh-rdp.html) <br />+  [NETFW\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/netfw-logging-enabled.html) <br />+  [NETFW\_MULTI\_AZ\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/netfw-multi-az-enabled.html) <br />+  [NETFW\_POLICY\_DEFAULT\_ACTION\_FRAGMENT\_PACKETS](https://docs.aws.amazon.com/config/latest/developerguide/netfw-policy-default-action-fragment-packets.html) <br />+  [NETFW\_POLICY\_DEFAULT\_ACTION\_FULL\_PACKETS](https://docs.aws.amazon.com/config/latest/developerguide/netfw-policy-default-action-full-packets.html) <br />+  [NETFW\_POLICY\_RULE\_GROUP\_ASSOCIATED](https://docs.aws.amazon.com/config/latest/developerguide/netfw-policy-rule-group-associated.html) <br />+  [NETFW\_STATELESS\_RULE\_GROUP\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/netfw-stateless-rule-group-not-empty.html) <br />+  [NLB\_CROSS\_ZONE\_LOAD\_BALANCING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/nlb-cross-zone-load-balancing-enabled.html) <br />+  [NO\_UNRESTRICTED\_ROUTE\_TO\_IGW](https://docs.aws.amazon.com/config/latest/developerguide/no-unrestricted-route-to-igw.html) <br />+  [OPENSEARCH\_ACCESS\_CONTROL\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-access-control-enabled.html) <br />+  [OPENSEARCH\_AUDIT\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-audit-logging-enabled.html) <br />+  [OPENSEARCH\_DATA\_NODE\_FAULT\_TOLERANCE](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-data-node-fault-tolerance.html) <br />+  [OPENSEARCH\_ENCRYPTED\_AT\_REST](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-encrypted-at-rest.html) <br />+  [OPENSEARCH\_HTTPS\_REQUIRED](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-https-required.html) <br />+  [OPENSEARCH\_IN\_VPC\_ONLY](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-in-vpc-only.html) <br />+  [OPENSEARCH\_LOGS\_TO\_CLOUDWATCH](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-logs-to-cloudwatch.html) <br />+  [OPENSEARCH\_NODE\_TO\_NODE\_ENCRYPTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/opensearch-node-to-node-encryption-check.html) <br />+  [RDS\_AUTOMATIC\_MINOR\_VERSION\_UPGRADE\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-automatic-minor-version-upgrade-enabled.html) <br />+  [RDS\_CLUSTER\_DEFAULT\_ADMIN\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/rds-cluster-default-admin-check.html) <br />+  [RDS\_CLUSTER\_DELETION\_PROTECTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-cluster-deletion-protection-enabled.html) <br />+  [RDS\_CLUSTER\_IAM\_AUTHENTICATION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-cluster-iam-authentication-enabled.html) <br />+  [RDS\_CLUSTER\_MULTI\_AZ\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-cluster-multi-az-enabled.html) <br />+  [RDS\_DB\_SECURITY\_GROUP\_NOT\_ALLOWED](https://docs.aws.amazon.com/config/latest/developerguide/rds-db-security-group-not-allowed.html) <br />+  [RDS\_ENHANCED\_MONITORING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-enhanced-monitoring-enabled.html) <br />+  [RDS\_IN\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/rds-in-backup-plan.html) <br />+  [RDS\_INSTANCE\_DEFAULT\_ADMIN\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-default-admin-check.html) <br />+  [RDS\_INSTANCE\_DELETION\_PROTECTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-deletion-protection-enabled.html) <br />+  [RDS\_INSTANCE\_IAM\_AUTHENTICATION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-iam-authentication-enabled.html) <br />+  [RDS\_INSTANCE\_PUBLIC\_ACCESS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/rds-instance-public-access-check.html) <br />+  [RDS\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/rds-last-backup-recovery-point-created.html) <br />+  [RDS\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/rds-logging-enabled.html) <br />+  [RDS\_MULTI\_AZ\_SUPPORT](https://docs.aws.amazon.com/config/latest/developerguide/rds-multi-az-support.html) <br />+  [RDS\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/rds-resources-protected-by-backup-plan.html) <br />+  [RDS\_SNAPSHOT\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/rds-snapshot-encrypted.html) <br />+  [RDS\_SNAPSHOTS\_PUBLIC\_PROHIBITED](https://docs.aws.amazon.com/config/latest/developerguide/rds-snapshots-public-prohibited.html) <br />+  [RDS\_STORAGE\_ENCRYPTED](https://docs.aws.amazon.com/config/latest/developerguide/rds-storage-encrypted.html) <br />+  [REDSHIFT\_BACKUP\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/redshift-backup-enabled.html) <br />+  [REDSHIFT\_REQUIRE\_TLS\_SSL](https://docs.aws.amazon.com/config/latest/developerguide/redshift-require-tls-ssl.html) <br />+  [REDSHIFT\_CLUSTER\_CONFIGURATION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-configuration-check.html) <br />+  [REDSHIFT\_CLUSTER\_MAINTENANCESETTINGS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-maintenancesettings-check.html) <br />+  [識別符 :](https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-public-access-check.html) REDSHIFT\_CLUSTER\_PUBLIC\_ACCESS\_CHECK <br />+  [REDSHIFT\_AUDIT\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/redshift-audit-logging-enabled.html) <br />+  [REDSHIFT\_CLUSTER\_KMS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/redshift-cluster-kms-enabled.html) <br />+  [REDSHIFT\_DEFAULT\_ADMIN\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/redshift-default-admin-check.html) <br />+  [REDSHIFT\_DEFAULT\_DB\_NAME\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/redshift-default-db-name-check.html) <br />+  [REDSHIFT\_ENHANCED\_VPC\_ROUTING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/redshift-enhanced-vpc-routing-enabled.html) <br />+  [REQUIRED\_TAGS](https://docs.aws.amazon.com/config/latest/developerguide/required-tags.html) <br />+  [RESTRICTED\_INCOMING\_TRAFFIC](https://docs.aws.amazon.com/config/latest/developerguide/restricted-common-ports.html) <br />+  [ROOT\_ACCOUNT\_HARDWARE\_MFA\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/root-account-hardware-mfa-enabled.html) <br />+  [ROOT\_ACCOUNT\_MFA\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/root-account-mfa-enabled.html) <br />+  [S3\_ACCOUNT\_LEVEL\_PUBLIC\_ACCESS\_BLOCKS\_PERIODIC](https://docs.aws.amazon.com/config/latest/developerguide/s3-account-level-public-access-blocks.html) <br />+  [S3\_ACCOUNT\_LEVEL\_PUBLIC\_ACCESS\_BLOCKS](https://docs.aws.amazon.com/config/latest/developerguide/s3-account-level-public-access-blocks.html) <br />+  [S3\_BUCKET\_ACL\_PROHIBITED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-acl-prohibited.html) <br />+  [識別符 :](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-blacklisted-actions-prohibited.html) S3\_BUCKET\_BLACKLISTED\_ACTIONS\_PROHIBITED <br />+  [識別碼：](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-default-lock-enabled.html) S3\_BUCKET\_DEFAULT\_LOCK\_ENABLED <br />+  [S3\_BUCKET\_LEVEL\_PUBLIC\_ACCESS\_PROHIBITED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-level-public-access-prohibited.html) <br />+  [S3\_BUCKET\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-logging-enabled.html) <br />+  [S3\_BUCKET\_POLICY\_GRANTEE\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-policy-grantee-check.html) <br />+  [S3\_BUCKET\_POLICY\_NOT\_MORE\_PERMISSIVE](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-policy-not-more-permissive.html) <br />+  [S3\_BUCKET\_PUBLIC\_READ\_PROHIBITED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-public-read-prohibited.html) <br />+  [S3\_BUCKET\_PUBLIC\_WRITE\_PROHIBITED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-public-write-prohibited.html) <br />+  [S3\_BUCKET\_REPLICATION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-replication-enabled.html) <br />+  [S3\_BUCKET\_SERVER\_SIDE\_ENCRYPTION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-server-side-encryption-enabled.html) <br />+  [S3\_BUCKET\_SSL\_REQUESTS\_ONLY](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-ssl-requests-only.html) <br />+  [S3\_BUCKET\_VERSIONING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-versioning-enabled.html) <br />+  [S3\_DEFAULT\_ENCRYPTION\_KMS](https://docs.aws.amazon.com/config/latest/developerguide/s3-default-encryption-kms.html) <br />+  [S3\_EVENT\_NOTIFICATIONS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/s3-event-notifications-enabled.html) <br />+  [S3\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/s3-last-backup-recovery-point-created.html) <br />+  [S3\_LIFECYCLE\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/s3-lifecycle-policy-check.html) <br />+  [S3\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/s3-resources-protected-by-backup-plan.html) <br />+  [S3\_VERSION\_LIFECYCLE\_POLICY\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/s3-version-lifecycle-policy-check.html) <br />+  [SAGEMAKER\_ENDPOINT\_CONFIGURATION\_KMS\_KEY\_CONFIGURED](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-endpoint-configuration-kms-key-configured.html) <br />+  [SAGEMAKER\_NOTEBOOK\_INSTANCE\_INSIDE\_VPC](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-inside-vpc.html) <br />+  [SAGEMAKER\_NOTEBOOK\_INSTANCE\_KMS\_KEY\_CONFIGURED](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-kms-key-configured.html) <br />+  [SAGEMAKER\_NOTEBOOK\_INSTANCE\_ROOT\_ACCESS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-instance-root-access-check.html) <br />+  [SAGEMAKER\_NOTEBOOK\_NO\_DIRECT\_INTERNET\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/sagemaker-notebook-no-direct-internet-access.html) <br />+  [SECRETSMANAGER\_ROTATION\_ENABLED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-rotation-enabled-check.html) <br />+  [SECRETSMANAGER\_SCHEDULED\_ROTATION\_SUCCESS\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-scheduled-rotation-success-check.html) <br />+  [SECRETSMANAGER\_SECRET\_PERIODIC\_ROTATION](https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-secret-periodic-rotation.html) <br />+  [SECRETSMANAGER\_SECRET\_UNUSED](https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-secret-unused.html) <br />+  [SECRETSMANAGER\_USING\_CMK](https://docs.aws.amazon.com/config/latest/developerguide/secretsmanager-using-cmk.html) <br />+  [SECURITY\_ACCOUNT\_INFORMATION\_PROVIDED](https://docs.aws.amazon.com/config/latest/developerguide/security-account-information-provided.html) <br />+  [SECURITYHUB\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/securityhub-enabled.html) <br />+  [SERVICE\_VPC\_ENDPOINT\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/service-vpc-endpoint-enabled.html) <br />+  [SES\_MALWARE\_SCANNING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/ses-malware-scanning-enabled.html) <br />+  [SHIELD\_ADVANCED\_ENABLED\_AUTORENEW](https://docs.aws.amazon.com/config/latest/developerguide/shield-advanced-enabled-autorenew.html) <br />+  [SHIELD\_DRT\_ACCESS](https://docs.aws.amazon.com/config/latest/developerguide/shield-drt-access.html) <br />+  [SNS\_ENCRYPTED\_KMS](https://docs.aws.amazon.com/config/latest/developerguide/sns-encrypted-kms.html) <br />+  [SNS\_TOPIC\_MESSAGE\_DELIVERY\_NOTIFICATION\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/sns-topic-message-delivery-notification-enabled.html) <br />+  [SSM\_DOCUMENT\_NOT\_PUBLIC](https://docs.aws.amazon.com/config/latest/developerguide/ssm-document-not-public.html) <br />+  [STEP\_FUNCTIONS\_STATE\_MACHINE\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/step-functions-state-machine-logging-enabled.html) <br />+  [STORAGEGATEWAY\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/storagegateway-last-backup-recovery-point-created.html) <br />+  [STORAGEGATEWAY\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/storagegateway-resources-protected-by-backup-plan.html) <br />+  [SUBNET\_AUTO\_ASSIGN\_PUBLIC\_IP\_DISABLED](https://docs.aws.amazon.com/config/latest/developerguide/subnet-auto-assign-public-ip-disabled.html) <br />+  [VIRTUALMACHINE\_LAST\_BACKUP\_RECOVERY\_POINT\_CREATED](https://docs.aws.amazon.com/config/latest/developerguide/virtualmachine-last-backup-recovery-point-created.html) <br />+  [VIRTUALMACHINE\_RESOURCES\_PROTECTED\_BY\_BACKUP\_PLAN](https://docs.aws.amazon.com/config/latest/developerguide/virtualmachine-resources-protected-by-backup-plan.html) <br />+  [VPC\_DEFAULT\_SECURITY\_GROUP\_CLOSED](https://docs.aws.amazon.com/config/latest/developerguide/vpc-default-security-group-closed.html) <br />+  [VPC\_FLOW\_LOGS\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/vpc-flow-logs-enabled.html) <br />+  [VPC\_NETWORK\_ACL\_UNUSED\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/vpc-network-acl-unused-check.html) <br />+  [VPC\_PEERING\_DNS\_RESOLUTION\_CHECK](https://docs.aws.amazon.com/config/latest/developerguide/vpc-peering-dns-resolution-check.html) <br />+  [識別符 :](https://docs.aws.amazon.com/config/latest/developerguide/vpc-sg-open-only-to-authorized-ports.html) VPC\_SG\_OPEN\_ONLY\_TO\_AUTHORIZED\_PORTS <br />+  [VPC\_VPN\_2\_TUNNELS\_UP](https://docs.aws.amazon.com/config/latest/developerguide/vpc-vpn-2-tunnels-up.html) <br />+  [WAF\_CLASSIC\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/waf-classic-logging-enabled.html) <br />+  [WAF\_GLOBAL\_RULEGROUP\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/waf-global-rulegroup-not-empty.html) <br />+  [WAF\_GLOBAL\_RULE\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/waf-global-rule-not-empty.html) <br />+  [WAF\_GLOBAL\_WEBACL\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/waf-global-webacl-not-empty.html) <br />+  [WAF\_REGIONAL\_RULEGROUP\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/waf-regional-rulegroup-not-empty.html) <br />+  [WAF\_REGIONAL\_RULE\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/waf-regional-rule-not-empty.html) <br />+  [WAF\_REGIONAL\_WEBACL\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/waf-regional-webacl-not-empty.html) <br />+  [WAFV2\_LOGGING\_ENABLED](https://docs.aws.amazon.com/config/latest/developerguide/wafv2-logging-enabled.html) <br />+  [WAFV2\_RULEGROUP\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/wafv2-rulegroup-not-empty.html) <br />+  [WAFV2\_WEBACL\_NOT\_EMPTY](https://docs.aws.amazon.com/config/latest/developerguide/wafv2-webacl-not-empty.html)   | 

## 搭配 Audit Manager 使用 AWS Config 自訂規則
<a name="aws-config-custom-rules"></a>

您可以使用 AWS Config 自訂規則做為稽核報告的資料來源。當控制項具有映射至 AWS Config 規則的資料來源時，Audit Manager 會新增規則建立的評估 AWS Config 。

您可以使用的自訂規則取決於您用來登入 Audit Manager AWS 帳戶 的 。如果您可以在 中存取自訂規則 AWS Config，則可以將其用作 Audit Manager 中的資料來源映射。
+ **對於個人 AWS 帳戶** – 您可以使用您透過 帳戶建立的任何自訂規則。
+ **對於屬於組織的帳戶** — 您可以使用任何成員層級的自訂規則。或者，您可以在 AWS Config中使用任何可用的組織層級自訂規則。

將自訂規則映射為控制項的資料來源之後，您可以將該控制項新增至 Audit Manager 中的自訂架構。

## 其他資源
<a name="aws-config-rules-troubleshoot"></a>
+ 若要尋找此資料來源類型問題的協助，請參閱 [我的評估未從 收集合規檢查證據AWS Config](evidence-collection-issues.md#no-evidence-from-config)和 [AWS Config 整合問題](https://docs.aws.amazon.com/audit-manager/latest/userguide/control-issues.html#config-rule-integration.title)。
+ 若要使用此資料來源類型建立自訂控制項，請參閱 [在 中建立自訂控制項 AWS Audit Manager](create-controls.md)。
+ 若要建立使用您的自訂控制項的自訂架構，請參閱 [在 中建立自訂架構 AWS Audit Manager](custom-frameworks.md)。
+ 若要將自訂控制項新增至現有的自訂架構，請參閱 [在 中編輯自訂架構 AWS Audit Manager](edit-custom-frameworks.md)。
+ 若要在 中建立自訂規則 AWS Config，請參閱[《 開發人員指南》中的開發 的自訂規則 AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html)。 *AWS Config *