List of AWS Config Managed Rules by Region Availability

• alb-http-to-https-redirection-check

• approved-amis-by-id

• approved-amis-by-tag

• cloudwatch-alarm-action-check

• cloudwatch-log-group-encrypted

• cloud-trail-cloud-watch-logs-enabled

• cloud-trail-enabled

• cloud-trail-encryption-enabled

• cloud-trail-log-file-validation-enabled

• cmk-backing-key-rotation-enabled

• cw-loggroup-retention-period-check

• desired-instance-tenancy

• desired-instance-type

• dms-replication-not-public

• dynamodb-autoscaling-enabled

• ebs-snapshot-public-restorable-check

• ec2-ebs-encryption-by-default

• ec2-imdsv2-check

• ec2-security-group-attached-to-eni

• ec2-stopped-instance

• ecs-task-definition-user-for-host-mode-check

• efs-encrypted-check

• eip-attached

• eks-endpoint-no-public-access

• eks-secrets-encrypted

• elasticache-redis-cluster-automatic-backup-check

• elasticsearch-encrypted-at-rest

• elasticsearch-in-vpc-only

• elb-custom-security-policy-ssl-check

• elb-predefined-security-policy-ssl-check

• incoming-ssh-disabled

• instances-in-vpc

• kms-cmk-not-scheduled-for-deletion

• lambda-function-public-access-prohibited

• multi-region-cloud-trail-enabled

• no-unrestricted-route-to-igw

• rds-enhanced-monitoring-enabled

• rds-logging-enabled

• redshift-backup-enabled

• redshift-cluster-configuration-check

• redshift-cluster-maintenancesettings-check

• redshift-require-tls-ssl

• required-tags

• restricted-incoming-traffic

• s3-account-level-public-access-blocks-periodic

• s3-bucket-blacklisted-actions-prohibited

• s3-bucket-policy-grantee-check

• s3-bucket-policy-not-more-permissive

• s3-bucket-public-read-prohibited

• s3-bucket-public-write-prohibited

• s3-bucket-replication-enabled

• s3-bucket-server-side-encryption-enabled

• s3-bucket-ssl-requests-only

• s3-default-encryption-kms

• secretsmanager-secret-periodic-rotation

• secretsmanager-secret-unused

• service-vpc-endpoint-enabled

• subnet-auto-assign-public-ip-disabled

• vpc-flow-logs-enabled

• vpc-sg-open-only-to-authorized-ports

• vpc-vpn-2-tunnels-up