templates/AwsBiotechBlueprint.template.quickstart.yml [1141:1232]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        \    Type: AWS::Config::ConfigRule\n  ElasticsearchEncryptedAtRest:\n    Properties:\n\
        \      ConfigRuleName: elasticsearch-encrypted-at-rest\n      Source:\n  \
        \      Owner: AWS\n        SourceIdentifier: ELASTICSEARCH_ENCRYPTED_AT_REST\n\
        \    Type: AWS::Config::ConfigRule\n  ElasticsearchInVpcOnly:\n    Properties:\n\
        \      ConfigRuleName: elasticsearch-in-vpc-only\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: ELASTICSEARCH_IN_VPC_ONLY\n    Type: AWS::Config::ConfigRule\n\
        \  ElbAcmCertificateRequired:\n    Properties:\n      ConfigRuleName: elb-acm-certificate-required\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::ElasticLoadBalancing::LoadBalancer\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: ELB_ACM_CERTIFICATE_REQUIRED\n\
        \    Type: AWS::Config::ConfigRule\n  ElbDeletionProtectionEnabled:\n    Properties:\n\
        \      ConfigRuleName: elb-deletion-protection-enabled\n      Scope:\n   \
        \     ComplianceResourceTypes:\n        - AWS::ElasticLoadBalancingV2::LoadBalancer\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: ELB_DELETION_PROTECTION_ENABLED\n\
        \    Type: AWS::Config::ConfigRule\n  ElbLoggingEnabled:\n    Properties:\n\
        \      ConfigRuleName: elb-logging-enabled\n      Scope:\n        ComplianceResourceTypes:\n\
        \        - AWS::ElasticLoadBalancing::LoadBalancer\n        - AWS::ElasticLoadBalancingV2::LoadBalancer\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: ELB_LOGGING_ENABLED\n\
        \    Type: AWS::Config::ConfigRule\n  EmrKerberosEnabled:\n    Properties:\n\
        \      ConfigRuleName: emr-kerberos-enabled\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: EMR_KERBEROS_ENABLED\n    Type: AWS::Config::ConfigRule\n\
        \  EmrMasterNoPublicIp:\n    Properties:\n      ConfigRuleName: emr-master-no-public-ip\n\
        \      Scope:\n        ComplianceResourceTypes: []\n      Source:\n      \
        \  Owner: AWS\n        SourceIdentifier: EMR_MASTER_NO_PUBLIC_IP\n    Type:\
        \ AWS::Config::ConfigRule\n  EncryptedVolumes:\n    Properties:\n      ConfigRuleName:\
        \ encrypted-volumes\n      Scope:\n        ComplianceResourceTypes:\n    \
        \    - AWS::EC2::Volume\n      Source:\n        Owner: AWS\n        SourceIdentifier:\
        \ ENCRYPTED_VOLUMES\n    Type: AWS::Config::ConfigRule\n  GuarddutyEnabledCentralized:\n\
        \    Properties:\n      ConfigRuleName: guardduty-enabled-centralized\n  \
        \    Source:\n        Owner: AWS\n        SourceIdentifier: GUARDDUTY_ENABLED_CENTRALIZED\n\
        \    Type: AWS::Config::ConfigRule\n  GuarddutyNonArchivedFindings:\n    Properties:\n\
        \      ConfigRuleName: guardduty-non-archived-findings\n      InputParameters:\n\
        \        daysHighSev:\n          Fn::If:\n          - guarddutyNonArchivedFindingsParamDaysHighSev\n\
        \          - Ref: GuarddutyNonArchivedFindingsParamDaysHighSev\n         \
        \ - Ref: AWS::NoValue\n        daysLowSev:\n          Fn::If:\n          -\
        \ guarddutyNonArchivedFindingsParamDaysLowSev\n          - Ref: GuarddutyNonArchivedFindingsParamDaysLowSev\n\
        \          - Ref: AWS::NoValue\n        daysMediumSev:\n          Fn::If:\n\
        \          - guarddutyNonArchivedFindingsParamDaysMediumSev\n          - Ref:\
        \ GuarddutyNonArchivedFindingsParamDaysMediumSev\n          - Ref: AWS::NoValue\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: GUARDDUTY_NON_ARCHIVED_FINDINGS\n\
        \    Type: AWS::Config::ConfigRule\n  IamGroupHasUsersCheck:\n    Properties:\n\
        \      ConfigRuleName: iam-group-has-users-check\n      Scope:\n        ComplianceResourceTypes:\n\
        \        - AWS::IAM::Group\n      Source:\n        Owner: AWS\n        SourceIdentifier:\
        \ IAM_GROUP_HAS_USERS_CHECK\n    Type: AWS::Config::ConfigRule\n  IamPasswordPolicy:\n\
        \    Properties:\n      ConfigRuleName: iam-password-policy\n      InputParameters:\n\
        \        MaxPasswordAge:\n          Fn::If:\n          - iamPasswordPolicyParamMaxPasswordAge\n\
        \          - Ref: IamPasswordPolicyParamMaxPasswordAge\n          - Ref: AWS::NoValue\n\
        \        MinimumPasswordLength:\n          Fn::If:\n          - iamPasswordPolicyParamMinimumPasswordLength\n\
        \          - Ref: IamPasswordPolicyParamMinimumPasswordLength\n          -\
        \ Ref: AWS::NoValue\n        PasswordReusePrevention:\n          Fn::If:\n\
        \          - iamPasswordPolicyParamPasswordReusePrevention\n          - Ref:\
        \ IamPasswordPolicyParamPasswordReusePrevention\n          - Ref: AWS::NoValue\n\
        \        RequireLowercaseCharacters:\n          Fn::If:\n          - iamPasswordPolicyParamRequireLowercaseCharacters\n\
        \          - Ref: IamPasswordPolicyParamRequireLowercaseCharacters\n     \
        \     - Ref: AWS::NoValue\n        RequireNumbers:\n          Fn::If:\n  \
        \        - iamPasswordPolicyParamRequireNumbers\n          - Ref: IamPasswordPolicyParamRequireNumbers\n\
        \          - Ref: AWS::NoValue\n        RequireSymbols:\n          Fn::If:\n\
        \          - iamPasswordPolicyParamRequireSymbols\n          - Ref: IamPasswordPolicyParamRequireSymbols\n\
        \          - Ref: AWS::NoValue\n        RequireUppercaseCharacters:\n    \
        \      Fn::If:\n          - iamPasswordPolicyParamRequireUppercaseCharacters\n\
        \          - Ref: IamPasswordPolicyParamRequireUppercaseCharacters\n     \
        \     - Ref: AWS::NoValue\n      Source:\n        Owner: AWS\n        SourceIdentifier:\
        \ IAM_PASSWORD_POLICY\n    Type: AWS::Config::ConfigRule\n  IamPolicyNoStatementsWithAdminAccess:\n\
        \    Properties:\n      ConfigRuleName: iam-policy-no-statements-with-admin-access\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::IAM::Policy\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: IAM_POLICY_NO_STATEMENTS_WITH_ADMIN_ACCESS\n\
        \    Type: AWS::Config::ConfigRule\n  IamRootAccessKeyCheck:\n    Properties:\n\
        \      ConfigRuleName: iam-root-access-key-check\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: IAM_ROOT_ACCESS_KEY_CHECK\n    Type: AWS::Config::ConfigRule\n\
        \  IamUserGroupMembershipCheck:\n    Properties:\n      ConfigRuleName: iam-user-group-membership-check\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::IAM::User\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: IAM_USER_GROUP_MEMBERSHIP_CHECK\n\
        \    Type: AWS::Config::ConfigRule\n  IamUserMfaEnabled:\n    Properties:\n\
        \      ConfigRuleName: iam-user-mfa-enabled\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: IAM_USER_MFA_ENABLED\n    Type: AWS::Config::ConfigRule\n\
        \  IamUserNoPoliciesCheck:\n    Properties:\n      ConfigRuleName: iam-user-no-policies-check\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::IAM::User\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: IAM_USER_NO_POLICIES_CHECK\n\
        \    Type: AWS::Config::ConfigRule\n  IamUserUnusedCredentialsCheck:\n   \
        \ Properties:\n      ConfigRuleName: iam-user-unused-credentials-check\n \
        \     InputParameters:\n        maxCredentialUsageAge:\n          Fn::If:\n\
        \          - iamUserUnusedCredentialsCheckParamMaxCredentialUsageAge\n   \
        \       - Ref: IamUserUnusedCredentialsCheckParamMaxCredentialUsageAge\n \
        \         - Ref: AWS::NoValue\n      Source:\n        Owner: AWS\n       \
        \ SourceIdentifier: IAM_USER_UNUSED_CREDENTIALS_CHECK\n    Type: AWS::Config::ConfigRule\n\
        \  IncomingSshDisabled:\n    Properties:\n      ConfigRuleName: restricted-ssh\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::EC2::SecurityGroup\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: INCOMING_SSH_DISABLED\n\
        \    Type: AWS::Config::ConfigRule\n  InstancesInVpc:\n    Properties:\n \
        \     ConfigRuleName: ec2-instances-in-vpc\n      Scope:\n        ComplianceResourceTypes:\n\
        \        - AWS::EC2::Instance\n      Source:\n        Owner: AWS\n       \
        \ SourceIdentifier: INSTANCES_IN_VPC\n    Type: AWS::Config::ConfigRule\n\
        \  InternetGatewayAuthorizedVpcOnly:\n    Properties:\n      ConfigRuleName:\
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



templates/AwsBiotechBlueprint.template.yml [1436:1527]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        \    Type: AWS::Config::ConfigRule\n  ElasticsearchEncryptedAtRest:\n    Properties:\n\
        \      ConfigRuleName: elasticsearch-encrypted-at-rest\n      Source:\n  \
        \      Owner: AWS\n        SourceIdentifier: ELASTICSEARCH_ENCRYPTED_AT_REST\n\
        \    Type: AWS::Config::ConfigRule\n  ElasticsearchInVpcOnly:\n    Properties:\n\
        \      ConfigRuleName: elasticsearch-in-vpc-only\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: ELASTICSEARCH_IN_VPC_ONLY\n    Type: AWS::Config::ConfigRule\n\
        \  ElbAcmCertificateRequired:\n    Properties:\n      ConfigRuleName: elb-acm-certificate-required\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::ElasticLoadBalancing::LoadBalancer\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: ELB_ACM_CERTIFICATE_REQUIRED\n\
        \    Type: AWS::Config::ConfigRule\n  ElbDeletionProtectionEnabled:\n    Properties:\n\
        \      ConfigRuleName: elb-deletion-protection-enabled\n      Scope:\n   \
        \     ComplianceResourceTypes:\n        - AWS::ElasticLoadBalancingV2::LoadBalancer\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: ELB_DELETION_PROTECTION_ENABLED\n\
        \    Type: AWS::Config::ConfigRule\n  ElbLoggingEnabled:\n    Properties:\n\
        \      ConfigRuleName: elb-logging-enabled\n      Scope:\n        ComplianceResourceTypes:\n\
        \        - AWS::ElasticLoadBalancing::LoadBalancer\n        - AWS::ElasticLoadBalancingV2::LoadBalancer\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: ELB_LOGGING_ENABLED\n\
        \    Type: AWS::Config::ConfigRule\n  EmrKerberosEnabled:\n    Properties:\n\
        \      ConfigRuleName: emr-kerberos-enabled\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: EMR_KERBEROS_ENABLED\n    Type: AWS::Config::ConfigRule\n\
        \  EmrMasterNoPublicIp:\n    Properties:\n      ConfigRuleName: emr-master-no-public-ip\n\
        \      Scope:\n        ComplianceResourceTypes: []\n      Source:\n      \
        \  Owner: AWS\n        SourceIdentifier: EMR_MASTER_NO_PUBLIC_IP\n    Type:\
        \ AWS::Config::ConfigRule\n  EncryptedVolumes:\n    Properties:\n      ConfigRuleName:\
        \ encrypted-volumes\n      Scope:\n        ComplianceResourceTypes:\n    \
        \    - AWS::EC2::Volume\n      Source:\n        Owner: AWS\n        SourceIdentifier:\
        \ ENCRYPTED_VOLUMES\n    Type: AWS::Config::ConfigRule\n  GuarddutyEnabledCentralized:\n\
        \    Properties:\n      ConfigRuleName: guardduty-enabled-centralized\n  \
        \    Source:\n        Owner: AWS\n        SourceIdentifier: GUARDDUTY_ENABLED_CENTRALIZED\n\
        \    Type: AWS::Config::ConfigRule\n  GuarddutyNonArchivedFindings:\n    Properties:\n\
        \      ConfigRuleName: guardduty-non-archived-findings\n      InputParameters:\n\
        \        daysHighSev:\n          Fn::If:\n          - guarddutyNonArchivedFindingsParamDaysHighSev\n\
        \          - Ref: GuarddutyNonArchivedFindingsParamDaysHighSev\n         \
        \ - Ref: AWS::NoValue\n        daysLowSev:\n          Fn::If:\n          -\
        \ guarddutyNonArchivedFindingsParamDaysLowSev\n          - Ref: GuarddutyNonArchivedFindingsParamDaysLowSev\n\
        \          - Ref: AWS::NoValue\n        daysMediumSev:\n          Fn::If:\n\
        \          - guarddutyNonArchivedFindingsParamDaysMediumSev\n          - Ref:\
        \ GuarddutyNonArchivedFindingsParamDaysMediumSev\n          - Ref: AWS::NoValue\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: GUARDDUTY_NON_ARCHIVED_FINDINGS\n\
        \    Type: AWS::Config::ConfigRule\n  IamGroupHasUsersCheck:\n    Properties:\n\
        \      ConfigRuleName: iam-group-has-users-check\n      Scope:\n        ComplianceResourceTypes:\n\
        \        - AWS::IAM::Group\n      Source:\n        Owner: AWS\n        SourceIdentifier:\
        \ IAM_GROUP_HAS_USERS_CHECK\n    Type: AWS::Config::ConfigRule\n  IamPasswordPolicy:\n\
        \    Properties:\n      ConfigRuleName: iam-password-policy\n      InputParameters:\n\
        \        MaxPasswordAge:\n          Fn::If:\n          - iamPasswordPolicyParamMaxPasswordAge\n\
        \          - Ref: IamPasswordPolicyParamMaxPasswordAge\n          - Ref: AWS::NoValue\n\
        \        MinimumPasswordLength:\n          Fn::If:\n          - iamPasswordPolicyParamMinimumPasswordLength\n\
        \          - Ref: IamPasswordPolicyParamMinimumPasswordLength\n          -\
        \ Ref: AWS::NoValue\n        PasswordReusePrevention:\n          Fn::If:\n\
        \          - iamPasswordPolicyParamPasswordReusePrevention\n          - Ref:\
        \ IamPasswordPolicyParamPasswordReusePrevention\n          - Ref: AWS::NoValue\n\
        \        RequireLowercaseCharacters:\n          Fn::If:\n          - iamPasswordPolicyParamRequireLowercaseCharacters\n\
        \          - Ref: IamPasswordPolicyParamRequireLowercaseCharacters\n     \
        \     - Ref: AWS::NoValue\n        RequireNumbers:\n          Fn::If:\n  \
        \        - iamPasswordPolicyParamRequireNumbers\n          - Ref: IamPasswordPolicyParamRequireNumbers\n\
        \          - Ref: AWS::NoValue\n        RequireSymbols:\n          Fn::If:\n\
        \          - iamPasswordPolicyParamRequireSymbols\n          - Ref: IamPasswordPolicyParamRequireSymbols\n\
        \          - Ref: AWS::NoValue\n        RequireUppercaseCharacters:\n    \
        \      Fn::If:\n          - iamPasswordPolicyParamRequireUppercaseCharacters\n\
        \          - Ref: IamPasswordPolicyParamRequireUppercaseCharacters\n     \
        \     - Ref: AWS::NoValue\n      Source:\n        Owner: AWS\n        SourceIdentifier:\
        \ IAM_PASSWORD_POLICY\n    Type: AWS::Config::ConfigRule\n  IamPolicyNoStatementsWithAdminAccess:\n\
        \    Properties:\n      ConfigRuleName: iam-policy-no-statements-with-admin-access\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::IAM::Policy\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: IAM_POLICY_NO_STATEMENTS_WITH_ADMIN_ACCESS\n\
        \    Type: AWS::Config::ConfigRule\n  IamRootAccessKeyCheck:\n    Properties:\n\
        \      ConfigRuleName: iam-root-access-key-check\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: IAM_ROOT_ACCESS_KEY_CHECK\n    Type: AWS::Config::ConfigRule\n\
        \  IamUserGroupMembershipCheck:\n    Properties:\n      ConfigRuleName: iam-user-group-membership-check\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::IAM::User\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: IAM_USER_GROUP_MEMBERSHIP_CHECK\n\
        \    Type: AWS::Config::ConfigRule\n  IamUserMfaEnabled:\n    Properties:\n\
        \      ConfigRuleName: iam-user-mfa-enabled\n      Source:\n        Owner:\
        \ AWS\n        SourceIdentifier: IAM_USER_MFA_ENABLED\n    Type: AWS::Config::ConfigRule\n\
        \  IamUserNoPoliciesCheck:\n    Properties:\n      ConfigRuleName: iam-user-no-policies-check\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::IAM::User\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: IAM_USER_NO_POLICIES_CHECK\n\
        \    Type: AWS::Config::ConfigRule\n  IamUserUnusedCredentialsCheck:\n   \
        \ Properties:\n      ConfigRuleName: iam-user-unused-credentials-check\n \
        \     InputParameters:\n        maxCredentialUsageAge:\n          Fn::If:\n\
        \          - iamUserUnusedCredentialsCheckParamMaxCredentialUsageAge\n   \
        \       - Ref: IamUserUnusedCredentialsCheckParamMaxCredentialUsageAge\n \
        \         - Ref: AWS::NoValue\n      Source:\n        Owner: AWS\n       \
        \ SourceIdentifier: IAM_USER_UNUSED_CREDENTIALS_CHECK\n    Type: AWS::Config::ConfigRule\n\
        \  IncomingSshDisabled:\n    Properties:\n      ConfigRuleName: restricted-ssh\n\
        \      Scope:\n        ComplianceResourceTypes:\n        - AWS::EC2::SecurityGroup\n\
        \      Source:\n        Owner: AWS\n        SourceIdentifier: INCOMING_SSH_DISABLED\n\
        \    Type: AWS::Config::ConfigRule\n  InstancesInVpc:\n    Properties:\n \
        \     ConfigRuleName: ec2-instances-in-vpc\n      Scope:\n        ComplianceResourceTypes:\n\
        \        - AWS::EC2::Instance\n      Source:\n        Owner: AWS\n       \
        \ SourceIdentifier: INSTANCES_IN_VPC\n    Type: AWS::Config::ConfigRule\n\
        \  InternetGatewayAuthorizedVpcOnly:\n    Properties:\n      ConfigRuleName:\
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



