aws-devsecops-conformancepack-pci/cft/aws-pci-conformancepack-update-v1.yml [89:123]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                  groupId:
                    ResourceValue:
                      Value: "RESOURCE_ID"
                ExecutionControls:
                  SsmControls:
                    ConcurrentExecutionRatePercentage: 10
                    ErrorPercentage: 10
                Automatic: True
                MaximumAutomaticAttempts: 10
                RetryAttemptSeconds: 600
            RestrictDefaultSecurityGroup:
              Type: AWS::Config::ConfigRule
              Properties:
                ConfigRuleName: RestrictDefaultSecurityGroup
                Description: >-
                  PCI.EC2.2 VPC default security group should prohibit inbound and outbound traffic
                Scope:
                  ComplianceResourceTypes:
                  - "AWS::EC2::SecurityGroup"
                Source:
                  Owner: AWS
                  SourceIdentifier: VPC_DEFAULT_SECURITY_GROUP_CLOSED
            RestrictDefaultSecurityGroupRemediation:
              DependsOn: RestrictDefaultSecurityGroup
              Type: 'AWS::Config::RemediationConfiguration'
              Properties:
                ConfigRuleName: RestrictDefaultSecurityGroup
                ResourceType: "AWS::EC2::SecurityGroup"
                TargetId: "Custom-RestrictSecurityGroup"
                TargetType: "SSM_DOCUMENT"
                TargetVersion: "1"
                Parameters:
                  AutomationAssumeRole:
                    StaticValue:
                      Values:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



aws-devsecops-conformancepack-pci/cft/aws-pci-conformancepack-v1.yml [89:123]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                  groupId:
                    ResourceValue:
                      Value: "RESOURCE_ID"
                ExecutionControls:
                  SsmControls:
                    ConcurrentExecutionRatePercentage: 10
                    ErrorPercentage: 10
                Automatic: True
                MaximumAutomaticAttempts: 10
                RetryAttemptSeconds: 600
            RestrictDefaultSecurityGroup:
              Type: AWS::Config::ConfigRule
              Properties:
                ConfigRuleName: RestrictDefaultSecurityGroup
                Description: >-
                  PCI.EC2.2 VPC default security group should prohibit inbound and outbound traffic
                Scope:
                  ComplianceResourceTypes:
                  - "AWS::EC2::SecurityGroup"
                Source:
                  Owner: AWS
                  SourceIdentifier: VPC_DEFAULT_SECURITY_GROUP_CLOSED
            RestrictDefaultSecurityGroupRemediation:
              DependsOn: RestrictDefaultSecurityGroup
              Type: 'AWS::Config::RemediationConfiguration'
              Properties:
                ConfigRuleName: RestrictDefaultSecurityGroup
                ResourceType: "AWS::EC2::SecurityGroup"
                TargetId: "Custom-RestrictSecurityGroup"
                TargetType: "SSM_DOCUMENT"
                TargetVersion: "1"
                Parameters:
                  AutomationAssumeRole:
                    StaticValue:
                      Values:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



