CloudFormation guard rules template for Auto Scaling resources

The following rules are included: 

  • No Public IP Assignment in Auto Scaling Groups

let autoscaling_launchconfiguration = Resources.*[
	Type == "AWS::AutoScaling::LaunchConfiguration"
]

rule autoscaling_launch_configuration_instances_public_ip when %autoscaling_launchconfiguration !empty {
	%autoscaling_launchconfiguration {
		Properties {
			AssociatePublicIpAddress exists <<AssociatePublicIpAddress is enabled by default.>>
			when AssociatePublicIpAddress exists {
				AssociatePublicIpAddress == false <<AssociatePublicIpAddress is enabled.>>
			}
		}
	}
}


Actions



Customize Template

* Required field