Checks whether each resource resides in a specified region.
Scenario
Enterprises may need to restrict the regions in which resources can be created to save costs and guarantee the performance of business.
Risk level
Default risk level: low.
You can change the risk level as required when you apply this rule.
Compliance evaluation logic
- If each resource resides in a specified region, the evaluation result is compliant.
- If a resource does not reside in a specified region, the evaluation result is non-compliant. For more information about how to correct the non-compliant configuration, see Non-compliance remediation.
Rule details
| Item | Description |
|---|---|
| Rule name | resource-region-limit |
| Rule ID | resource-region-limit |
| Tag | Region |
| Automatic remediation | Not supported |
| Trigger type | Configuration change |
| Supported resource type | Resource types |
| Input parameter | regionsNote Separate multiple regions with commas (,).
|
Non-compliance remediation
When you create a resource, you must select a specified region. For example, select a specified region when you create an Elastic Compute Service (ECS) instance. For more information, see Create an instance by using the wizard.