AWS::Shield::ProtectionGroupA grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.
6 configurable properties. 3 required. Click a row to see details.
| Property | Type | Flags |
|---|---|---|
Aggregation | string | Required |
Pattern | string | Required |
ProtectionGroupId | string | RequiredCreate-only |
Members | Array<string> | |
ResourceType | string | |
Tags | Array<Tag> |
Values returned after the resource is created. Access these with Fn::GetAtt.
| Attribute | Type | Description |
|---|---|---|
ProtectionGroupArn | string | The ARN (Amazon Resource Name) of the protection group. |
A minimal template with required properties and common optional ones.
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::Shield::ProtectionGroup
Resources:
MyResource:
Type: AWS::Shield::ProtectionGroup
Properties:
Aggregation: "SUM"
Pattern: "ALL"
ProtectionGroupId: "my-protectiongroupid"
Tags:
- Key: Environment
Value: ProductionPermissions CloudFormation needs in your IAM role to manage this resource.
shield:CreateProtectionGroupshield:TagResourceshield:DeleteProtectionGroupshield:UntagResourceshield:DescribeProtectionGroupshield:ListTagsForResourceshield:UpdateProtectionGroupshield:ListTagsForResourceshield:TagResourceshield:UntagResourceshield:ListProtectionGroupsOur bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterProtectionGroupArnThese properties cannot be changed after the resource is created. Updating them triggers a replacement.
ProtectionGroupId