search

awslabs / aws-config-rules

[Node, Python, Java] Repository of sample Custom Rules for AWS Config.
http://aws.amazon.com/config/
Creative Commons Zero v1.0 Universal
1.58k stars 851 forks source link

Conformance Pack for FedRamp not deployable in GovCloud #421

Open jpSimkins opened 2 months ago

jpSimkins commented 2 months ago

I tried to use: Operational-Best-Practices-for-FedRAMP.yaml from here in CloudFormation in GovCloud and it will not deploy due to a couple reasons.

  1. Some metrics are not on GovCloud.

  2. Property validation failure: [Value of property {/InputParameters} does not match type {String}]

This is the same issue when trying to deploy the same conformance pack in Config in the AWS console.

I recommend adding a check to see if the region is a GovCloud region. I added this to my template so I can use the same template across partitions but I am stuck with the inputParameters not being a string.