custom-amazon-s3.yaml

################################################################################
#
#   Conformance Pack:
#     Operational Best Practices for Amazon S3.
#
#   Modified to use an input parameter identifying exempted resources
################################################################################

Resources:
  S3BucketLevelPublicAccessProhibited:
    Properties:
      InputParameters:
        {"excludedPublicBuckets": "public-bucket-name"}
      ConfigRuleName: s3-bucket-level-public-access-prohibited
      Scope:
        ComplianceResourceTypes:
          - "AWS::S3::Bucket"
      Source:
        Owner: AWS
        SourceIdentifier: S3_BUCKET_LEVEL_PUBLIC_ACCESS_PROHIBITED
    Type: AWS::Config::ConfigRule