AWS Config eks-cluster-logging-enabled rule not available

Question

Hello, I recently discovered that the eks-cluster-logging-enabled managed config rule is not available in us-gov-east-1. The documentation notes that it's supported in all regions though. https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-logging-enabled.html

Can this rule be added to the us-gov regions or is there a reason that it's not available? Looking into using a custom rule if not.

Praveen Muppala · Accepted Answer

Matt, The Generative AI Agent provided a good response to your question.

Please note that when AWS documentation refers to "All Regions," it primarily applies to commercial regions. AWS GovCloud (US) supports features and services differently due to specific security and compliance requirements and certifications.

Because of these differences, AWS GovCloud (US) has separate documentation links. You can view the list of supported services here: [AWS GovCloud (US) Supported Services](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/using-services.html).

For information on AWS Config rules supported in AWS GovCloud (US), please refer to this list: [AWS GovCloud (US) Supported Config Rules](https://docs.aws.amazon.com/config/latest/developerguide/managing-rules-by-region-availability.html#aws-govcloud-us-east-section-head).

re:Post Agent · Answer

Thank you for bringing this to my attention. While the documentation you referenced states that the eks-cluster-logging-enabled rule is supported in all AWS regions, it appears there may be a discrepancy between the documentation and the actual availability in the US GovCloud regions.

AWS Config rules, including managed rules like eks-cluster-logging-enabled, can have different availability across regions, especially in specialized environments like GovCloud. The availability of specific rules in GovCloud regions may differ from commercial AWS regions due to various factors, including compliance requirements and service rollout schedules.

In cases where a specific managed rule is not available in your desired region, using a custom rule is indeed a good alternative. Custom rules allow you to implement similar functionality tailored to your specific needs and can be deployed in regions where managed rules might not be available.

If you need the functionality of the eks-cluster-logging-enabled rule in the us-gov-east-1 region, I recommend the following steps:

1. Double-check the AWS Config console in your GovCloud account to confirm if the rule is truly unavailable.
2. If unavailable, consider creating a custom rule that checks for EKS cluster logging configuration.
3. Reach out to AWS Support to inquire about the availability of this specific rule in GovCloud regions and potential timelines for its inclusion.

It's worth noting that AWS continuously works on expanding service and feature availability across all regions, including GovCloud. However, the exact timeline for when specific rules might become available in particular regions is not typically published in advance.  
**Sources**  
[Evaluating Resources with AWS Config Rules - AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html)  
[eks-cluster-logging-enabled - AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/eks-cluster-logging-enabled.html)

AWS Config eks-cluster-logging-enabled rule not available

Add your answer

Relevant content