aws-devsecops-conformancepack-pci/cft/aws-pci-conformancepack-update-v1.yml [11:51]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Parameters:

  DeliveryS3Bucket:
    Description: Delivery Bucket from AWS Config settings
    Type: String
    Default: 'config-bucket-accountid'

Resources:

  ConformancePack:
    Type: 'AWS::Config::ConformancePack'
    Properties: 
      ConformancePackName: CustomPCIEC2LambdaConfPack
      DeliveryS3Bucket: !Ref DeliveryS3Bucket
      TemplateBody: |-
        Resources:
            AutoScalingELBHealthCheck:
              Type: AWS::Config::ConfigRule
              Properties:
                ConfigRuleName: AutoScalingELBHealthCheck
                Description: >-
                  [PCI.AutoScaling.1] Auto scaling groups associated with a load balancer should use health checks
                Scope:
                  ComplianceResourceTypes:
                  - "AWS::AutoScaling::AutoScalingGroup"
                Source:
                  Owner: AWS
                  SourceIdentifier: AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED
            AutoScalingELBHealthCheckRemediation:
              DependsOn: AutoScalingELBHealthCheck
              Type: 'AWS::Config::RemediationConfiguration'
              Properties:
                ConfigRuleName: AutoScalingELBHealthCheck
                ResourceType: "AWS::AutoScaling::AutoScalingGroup"
                TargetId: "Custom-AutoScalingELBHealthCheck"
                TargetType: "SSM_DOCUMENT"
                TargetVersion: "1"
                Parameters:
                  AutomationAssumeRole:
                    StaticValue:
                      Values:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



aws-devsecops-conformancepack-pci/cft/aws-pci-conformancepack-v1.yml [11:51]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Parameters:

  DeliveryS3Bucket:
    Description: Delivery Bucket from AWS Config settings
    Type: String
    Default: 'config-bucket-accountid'

Resources:

  ConformancePack:
    Type: 'AWS::Config::ConformancePack'
    Properties: 
      ConformancePackName: CustomPCIEC2LambdaConfPack
      DeliveryS3Bucket: !Ref DeliveryS3Bucket
      TemplateBody: |-
        Resources:
            AutoScalingELBHealthCheck:
              Type: AWS::Config::ConfigRule
              Properties:
                ConfigRuleName: AutoScalingELBHealthCheck
                Description: >-
                  [PCI.AutoScaling.1] Auto scaling groups associated with a load balancer should use health checks
                Scope:
                  ComplianceResourceTypes:
                  - "AWS::AutoScaling::AutoScalingGroup"
                Source:
                  Owner: AWS
                  SourceIdentifier: AUTOSCALING_GROUP_ELB_HEALTHCHECK_REQUIRED
            AutoScalingELBHealthCheckRemediation:
              DependsOn: AutoScalingELBHealthCheck
              Type: 'AWS::Config::RemediationConfiguration'
              Properties:
                ConfigRuleName: AutoScalingELBHealthCheck
                ResourceType: "AWS::AutoScaling::AutoScalingGroup"
                TargetId: "Custom-AutoScalingELBHealthCheck"
                TargetType: "SSM_DOCUMENT"
                TargetVersion: "1"
                Parameters:
                  AutomationAssumeRole:
                    StaticValue:
                      Values:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



