A managed rule is a piece of logical judgment code that is stored in a rule function of Function Compute. You can create a rule based on a managed rule provided by Cloud Config to audit associated resources.
Procedure
Log on to the Cloud Config console.
Optional. In the upper-left corner, select an account group.
This operation is required only if you are using a management account of a resource directory. Otherwise, you do not need to perform the operation.
In the left-side navigation pane, choose .
On the Rules page, click Create Rule.
In the Select Create Method step, select Based on managed rule, select a rule from a template, and then click Next.
NoteFor more information about the rule templates that are supported by Cloud Config, see Managed rules.
In the Set Basic Properties step, configure the Rule Name, Parameter Settings, Risk Level, Trigger, Tags, and Description parameters. Then, click Next.
In the Set Effective Scope step, specify resource types and click Next.
You can also configure the Excluded Resource IDs, Effective for the designated resource groups, Effective for designated regions, and Effective for designated tags parameters to narrow down the scope of applicable resources.
In the Set Remediation step, click Submit.
You can turn on Set Remediation and configure template remediation or custom remediation for the rule as prompted. For more information about how to configure remediation, see Overview of remediation settings.