bedrock-agentcore-memory-encryption-enabled - AWS Config
AWS CloudFormation template
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

bedrock-agentcore-memory-encryption-enabled

Checks whether Amazon Bedrock AgentCore Memory uses customer-managed KMS key for encryption. The rule is NON_COMPLIANT if AgentCore Memory does not have EncryptionKeyArn configured.

Identifier: BEDROCK_AGENTCORE_MEMORY_ENCRYPTION_ENABLED

Resource Types: AWS::BedrockAgentCore::Memory

Trigger type: Configuration changes

AWS Region: Only available in Asia Pacific (Mumbai), US East (Ohio), Europe (Ireland), Europe (Frankfurt), US East (N. Virginia), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.