aws-devsecops-conformancepack-pci/cft/aws-pci-conformancepack-update-v1.yml [53:87]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                  ASGGroupArn:
                    ResourceValue:
                      Value: "RESOURCE_ID"
                ExecutionControls:
                  SsmControls:
                    ConcurrentExecutionRatePercentage: 10
                    ErrorPercentage: 10
                Automatic: True
                MaximumAutomaticAttempts: 10
                RetryAttemptSeconds: 600
            RemoveUnusedEC2SecurityGroups:
              Type: AWS::Config::ConfigRule
              Properties:
                ConfigRuleName: RemoveUnusedEC2SecurityGroups
                Description: >-
                  PCI.EC2.3 – Unused EC2 Security Groups should be removed
                Scope:
                  ComplianceResourceTypes:
                  - "AWS::EC2::SecurityGroup"
                Source:
                  Owner: AWS
                  SourceIdentifier: EC2_SECURITY_GROUP_ATTACHED_TO_ENI
            RemoveUnusedEC2SecurityGroupsRemediation:
              DependsOn: RemoveUnusedEC2SecurityGroups
              Type: 'AWS::Config::RemediationConfiguration'
              Properties:
                ConfigRuleName: RemoveUnusedEC2SecurityGroups
                ResourceType: "AWS::EC2::SecurityGroup"
                TargetId: "Custom-RemoveSecurityGroup"
                TargetType: "SSM_DOCUMENT"
                TargetVersion: "1"
                Parameters:
                  AutomationAssumeRole:
                    StaticValue:
                      Values:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



aws-devsecops-conformancepack-pci/cft/aws-pci-conformancepack-v1.yml [53:87]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                  ASGGroupArn:
                    ResourceValue:
                      Value: "RESOURCE_ID"
                ExecutionControls:
                  SsmControls:
                    ConcurrentExecutionRatePercentage: 10
                    ErrorPercentage: 10
                Automatic: True
                MaximumAutomaticAttempts: 10
                RetryAttemptSeconds: 600
            RemoveUnusedEC2SecurityGroups:
              Type: AWS::Config::ConfigRule
              Properties:
                ConfigRuleName: RemoveUnusedEC2SecurityGroups
                Description: >-
                  PCI.EC2.3 – Unused EC2 Security Groups should be removed
                Scope:
                  ComplianceResourceTypes:
                  - "AWS::EC2::SecurityGroup"
                Source:
                  Owner: AWS
                  SourceIdentifier: EC2_SECURITY_GROUP_ATTACHED_TO_ENI
            RemoveUnusedEC2SecurityGroupsRemediation:
              DependsOn: RemoveUnusedEC2SecurityGroups
              Type: 'AWS::Config::RemediationConfiguration'
              Properties:
                ConfigRuleName: RemoveUnusedEC2SecurityGroups
                ResourceType: "AWS::EC2::SecurityGroup"
                TargetId: "Custom-RemoveSecurityGroup"
                TargetType: "SSM_DOCUMENT"
                TargetVersion: "1"
                Parameters:
                  AutomationAssumeRole:
                    StaticValue:
                      Values:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



